Wait -- are they just using the password you type for their site to log in and go through your gmail account (guessing that they're the same pw)? That's fraud. I don't care if it's in the fine print. I use multiple passwords, but not enough. If websites just start using my passwords to break into my private data on other sites, that's seriously fucked up.