Expensify was a pretty well known case of this several years ago — their marketing was all about their advanced scanning technology, and it turned out they were using Mechanical Turk in many cases with little concern for PII (or corporate security) concerns.
(I have no idea if this is still the case, for the record.)
(I have no idea if this is still the case, for the record.)