One could argue that, but with a properly designed API, it could preserve anonymity while still providing businesses with the necessary validation.