> An email address is not a credit card. It isn't private information.

You don't know what email address I'm giving you; I generate single-use emails for just about everything I sign up for, so when I start getting spam for it - like I actually did about 20 minutes ago - I can go straight to the source and start asking whether they got hacked, or sold me out.