Plugins collecting information and phoning home to a third-party without the user’s consent is a serious issue in the WordPress community.

Whaaaaat?!?

*Cough*! *Cough*! *Cough*!

[Catches breath…]

Can we please address WordPress itself before trying to give lessons to plugin and theme authors?

Phones home with a lot more information than it should? Check.

Collects information on its users using Gravatars and pray tell what else? Check.

Creates potential privacy issues in the process by exposing md5'd versions of commenter email addresses? Check.

Doesn't disclose any of the above? Check.

Doesn't allow to easily disable any of the above? Check.

Consistently refused to address any of the above issues for *years*, going as far as closing several related tickets as *won't fix*? Check.

No offense, but who the hell do you thing you're kidding here with this shameless and ludicrous angelic stance?

WordPress itself is the worst offender in this area. Period, end of story. No ifs, no buts.

As long as WordPress doesn't get this right and lead by example, this entire article is moot.