if, like a previous poster said, its a breach of contract on their end, thats messed up. if, like you say, its a breach of contract on the user's end, then what they're doing is fine.
but if thats the method they're using, they're no better than those "freecreditscore.com" jackasses.