A big tech company provides a free app service that gives users a list of nearby takeaway restaurants. The users need to agree that the app can trace their locations.  The app has a feature that allows users to order food and pay for it before they physically reach the restaurants. When sent to the card company's server, the app encrypts the users' financial information, such as credit card number and CVC (Card Verification Code), so that a cybercriminal cannot grab the numbers. The app collects the users' email addresses to send them the receipts for the payment for the food. However, the users' email addresses are visible to the restaurants. Analyze this scenario in terms of what privacy problems can arise.