[scoot]

It isn't just ethics; in Europe, at least, it's regulatory. (See GDPR and it predecessors).

The response from Udacity suggests not.