/u/nutomic found a bad security bug here where the API was leaking emails. It was my bad. Its fixed now, I’ll try to be more vigilant about emails in the future.