Answer:
Yes. As long as they tell you about it and give you the option to opt out.
Explanation:
With the user's consent, it is fine. If the user does not know about it or says no and the company continues then it becomes unethical as it is a breach of trust and a violation of that user's privacy.
