Wow! I thought ICO emails and details are kept private and should not be disclosed.
There are even KYC that requires more than 2 ids.
I don't know where you got those information, if you are legitimate but this will definitely not do good within the industry.
I myself, participates in ICOs, gained much more than I lost, but my privacy is something I can't risk over those gains.
Each company that collects information will have disclaimers. As long as it is genuine it is perfectly legal and ok.