Without knowing what your service does, it could very much be a breach of privacy.
Suppose you are building this to verify parts of an identity in the healthcare industry. Suppose it's for a very specific purpose -- e.g. verifying addresses of patients in certain conditions or under-going certain procedures (HIV/AIDS patients, abortions, etc). If someone were to intercept that information they could conceivably find those people and harrass them.
Or maybe your service sells something, and your competitors can intercept address information. They could start advertising to the addresses, which is an indirect violation of privacy (the person at the address didn't necessarily allow anyone else to get their address from you).
I would consider this a breach of privacy.