If they really have ethical concerns regarding sharing data with third parties, maybe they should update their privacy policies accordingly?

"We collect information related to web traffic such as IP addresses and geolocation data for security-relevant events and to analyze how and where RubyGems.org is used."

(https://rubygems.org/policies/privacy)

"We may share aggregate or de-identified information with third parties for research, marketing, analytics, and other purposes, provided such information does not identify a particular individual."

(https://rubycentral.org/privacy-notice/)