How is a developer's mailing address not a sensitive information for that developer? How does a tech company get away making a blanket assumption like that?