Couldn't this be overcome by giving the user the possibility to add service providers themselves? Then it would be the users committing the violation.