A similar issue to the one you bring up has recently gained attention as it applies to Facebook's tracking of user purchases -- privacy is guaranteed for their materials on the website, but apparently Facebook doesn't apply the same rules to XML feeds and other kinds of APIs, see this article for more.