I’m out of touch here, what happened? No longer use it, but have some previously stored data there, should I do a purge? Is it dead or did they transition to something profit-driven and questionable?

The obvious solution would be to take some token as an argument to the api calls that is private to the user, which would signify a consent to share also the hidden data.

I think there already is a token like this for steam item trading, in case your profile is private?

I.e if you don’t provide that argument, share only public stuff to the caller. If you do, it’s a explicit choice by you, since you are required to provide your credentials in some form of a token.