Yeah from the letter it doesn't appear like it's illegal, otherwise the FTC would have taken that route. Having said that, the letter is a strong indication that it is on the FTC's radar insomuch as they will find a way to make it illegal if it keeps coming up as a privacy issue.