Yes, it's netflix's fault unless they clearly obtain permission from people to share information that their customers could naturally assume was private.

As stated elsewhere Netflix should just have a clear opt-in for sharing the data and we can continue on.