Are you violating your privacy policy without meaning to? When you use ASP services to "power" parts of your business, sometimes that means your customer's email addresses can end up going to places you didn't intend, or be seen by people you don't want them to be seen by.
For example, a shopping cart system we've evaluated for our own store's possible use, allows affiliates to get the email addresses of every sale made through their link. Another company owner just told me he was considering online invoicing ASPs to electronically bill his clients, until he realized that every client email address would go through and possibly be harvested by that ASP's parent company's systems.
It's so easy to write "We never share our customers or readers emails with anyone!" in your privacy statement. It's a lot harder to stick to that promise in real life.
