In the European Union this sort of site would almost certainly be illegal. The EU has "data protection law" which basically say personal information is protected and one needs the consent of the person to process and do things with it. You also must store in a legal protected way. You don't even need to get into complicated "does this or does this not count as extortion" malarky.