NordVPN's official response was to get defensive; they proceeded to actually publicly post a screenshot which included the customer's email address. I couldn't believe it.
That tells you all you need to know about NordVPN's terrible attitude towards privacy.