The recipient's email service provider seems to be the "third party" at issue here.