"This is more like phishing, asking us to sign up to something that looks helpful, but is actually a data breach."