It is not okay in the legal sense. But it has been given a green light far too many times by tacit approval of the users who could care less so long as the info is not leaked.