This is the right answer. Matching user data without consent is becoming fairly risky from a data regulation standpoint, as well as user perception.