If you're uploading information to a third party, you no longer have privacy rights under the third party doctrine. That's very well established precedent.

As I said in another comment here, the issue is when it goes beyond such information like IP addresses and goes to actually hacking, which involves running code on the victim's computer.