[ryandrake]

Sounds like a good avenue to explore would be: If you did not have this access, how would your product fail to achieve its use cases? If you can answer this, then you can probably provide the information they are asking for.

And NOT the technically correct answer of "The product would fail to use Instagram OAuth to retrieve the username from the authorised user." Think about why the username is needed in the first place.