Maybe WordPress core should present users with information that states something to the effect of: WordPress enables Gravatar by default. When Gravatar is enabled, your IP address and a referring URL are sent to third-party servers owned by Automattic, Inc. on every page load. This information could be used to track your browsing activities and interests by Automattic and/or anyone they chose to share the information with. This also applies to everyone that visits your site. When put in context, WordPress runs 20% of the web, so when enabling this service you're adding to a global tracking network owned by a third party commercial entity whose goals and philosophies may or may not align with yours, now and/or in the future. To disable Gravatar, click here.