A few years ago I received an email from my brother (supposedly) informing me that he had a few photos to share with me. The link went to Tagged where I was asked for my email and MY EMAIL PASSWORD!!! Evidently my brother had given Tagged access to HIS email, and they used his contacts to send email to every contact.
Then, in the intervening years, I would get email from people I knew who, supposedly, had joined LinkedIn and were sending requests for me to join them on LinkedIn. They (LinkedIn), too, were getting access to the contacts of those who agreed to give up their email contacts.
This needs to STOP.