That or it could be sending only a fingerprint (still a privacy issue, but less severe)