This is framed with is in mind but the place where this actually happens the most is mobile apps.

It’s difficult to protect your contact info when everyone with you in their contracts gives access to candy crush. It’s the one I see the most and know who does it because those people will show up in the “you might know this person” shit.