Is Chase's practice itself legal? Forcing mailing a physical letter that must contain a lot of personal identifying information...? That's a really shady move

Is Chase's practice itself legal? Forcing mailing a physical letter that must contain a lot of personal identifying information...? That's a really shady move and I'll take note to avoid any business with Chase in the future.