Everyone can look at the ledger. This is of course the whole point. But it means nothing by itself. Privacy is eroded by linking ledger pseudonyms with other identities. It's especially bad when a record of that link is made in a database. This is something that users do for various reasons, but it's not required.