"What else can they do with your client information without your knowledge or permission. People who purchase this product should be made aware of that."

Yes, it's a big risk. Security, access, etc. The advantages can outweigh the risk, including IT support and mirror site (when the main server goes down or there is an office fire, they have automatic switching to route to a different computer farm).

@IntuitBrittneyS 

Using their username with that @ symbol is how it notifies them.