Everyone got used to sending that information, since most exchanges (unfortunately) require it.
I agree though, never send your private information to an ICO like ID data, they should not need it.
ICOs are required to carry out KYC if they want to operate in a regulated system. If at any point you are raising money, you have to do KYC or you will fall foul of legal regulations. That's the law as it stands.