The answer
Usually yes for non-hardened addresses on that account. An extended public key permits derivation of a sequence of receiving addresses without spending authority, so sharing it can disclose historical and future payment activity.
What to do next
Treat xpubs and watch-only exports as sensitive information; share them only with a service whose privacy policy and security you accept.
Sparrow Wallet
This resource helps with the question, but is not presented as a commissionable partner.
Visit Sparrow Wallet ↗Useful research or product resource; no affiliate status assumed.RELATED PRODUCT OR SERVICE
NordVPN network privacy service
Relevant to protecting the network connection, not to making blockchain transactions untraceable.
Explore NordVPN network privacy service ↗Official website; affiliate programme available to apply for. No tracked link or partner approval yet.Related crypto questions
Frequently asked questions
Does an xpub alone let someone spend my bitcoin?
Ordinarily no. An xpub does not contain the private signing keys.