Is this ethical/legal?

I don’t want to divulge my buddy’s info.