It being creepy is the harm/negative consequence. We feel innately creeped out about something like that because we're raised to value privacy the same way we value safety and security. A violation of privacy doesn't need some negative consequence to be harmful, it's harmful in and of itself.