Of course "admitting" it, can also be phrased as "being fully transparent" and is actually required by many privacy regulations. If you tell a user you are doing something with their personal data, in the US, you generally have the right to do it.