Absolutely. Just because the larger companies who started the habit did it, that does not set any sort of precedent of consent. There are boundaries to taking data, especially when there are faces and names associated. Hopefully future tech people can learn this sooner than later...