Unfortunately, Apple didn’t appear to realize that it was necessary to screen what it allows to access this data. Security researchers revealed that a simple web form can grab much of this data – first name, last name, work place, city, state, and email address — no questions asked.
More: continued here