We have a Withings scale. It’s nice. I like it knows who the different household members are and automatically sends the reading to the right app for tracking. It’s a nice bit of product design. My wife also has a Withings smart watch, it looks good and works.
That’s kinda the limit of our relationship with the company.
Then a week or so ago I got an email saying my membership had run out or somethign. I was curious as I am generally curious about digital services because my job is to know about them. I clicked the CTA link in the email. That’s when I was surprised. It took me to a page that thanked me for updating my marketing preferences (or something similar). I hadn’t, I’d just clicked a link in an email. I was a bit annoying – I felt tricked – but whatever I’ll just mark any emails as spam.
This is the email:

Then today Withings sent an email apologising for the previous email:

“We value your trust more than a click”; looking at the r/Withings it looks like they have a lot of trust to build, but this is appreciated.
[Puts on grumpy old man hat]
Links are GET requests and should always be idempotent.