If you're signing up for a service that sensibly uses your email for login but has no other plausible reason to send you email, how can you tell the difference at signup time between one that's going to do just what it seems like and one that's also going to send you "marketing emails"?