Does their user agreement say they won't be harvesting PII?