Good find, thanks for sharing that. So it's classic case of the business deciding they had a use case that took precedence over their users' interests. I feel

Good find, thanks for sharing that. So it's classic case of the business deciding they had a use case that took precedence over their users' interests. I feel pretty confident that they could have come up with a better solution if they had considered the privacy aspect at all. One really simple, basic step might be not exposing the exact datetime when the transaction was made. Not linking both parties to the transaction in one display would be another choice that would still serve the purpose of demonstrating volume.