It was being shared with advertisers and analytics providers anyway.

That doesn't make it acceptable in any way.