Still, this is interesting. It seems to me they are really parsing the
data from various interception points,
not getting it directly from Google and Yahoo. And the really scary
question is - how? Google is https
only, no? (I don't use Google that much and I use HTTPS everywhere). Do
they really do active MITM?

If they could have just asked for the data, they would not need to wait
until someone "opens" inbox
or views address book to collect the data...

This is very interesting.

J.