There were settings to disable it, but really they should have been private by default:

https://nakedsecurity.sophos.com/2013/04/03/how-to-stop-your...

It was fairly well known at the time I thought.