It's not clear from the sketchy evidence provided that they're specifically scraping GMail for your Amazon purchases. It might be that they're looking into your GMail for search results in general. It would be interesting if that user sent himself a message with the same search terms in it to see whether the results are specific to emails from Amazon.