Referencing A Christmas Prince, a film Netflix produced and is extensively promoting, the company claimed 53 users had watched it every day for the past 18 days - and suggested they were traumatised.
The company wrote: "To the 53 people who've watched A Christmas Prince every day for the past 18 days: Who hurt you?"
Angela Kay responded: "Very creepy, Netflix. Not cool spying on your PAYING customers and then judging them in public."
It is normal for media subscription services to collect data and develop content to their customers' tastes and Netflix is not alone in calling users out based on that data.
Music-streaming service Spotify ran an advertising campaign using users' playlist titles in 2016, mentioning playlists called "I don't know how to make a playlist" and "sorry I lost your cat".
Netflix told Sky News: "The privacy of our members' viewing is important to us. This information represents overall viewing trends, not the personal viewing information of specific, identified individuals."
Despite this assertion, those responding on Twitter were concerned about what they perceived as a privacy violation. One wrote: "To the @Netflix employee who recently watched 1984: It's not an instruction manual."
The collection and processing of data on users is usually a part of the terms and conditions of signing up for services such as Netflix, but comes with legal responsibilities under the Data Protection Act.
An ICO spokesperson told Sky News: "Streaming and on-demand TV services such as Netflix commonly collect personal data about individuals' viewing habits in order to provide a more personalised experience - for example by suggesting new content that may be of interest.
"When data from lots of subscribers is aggregated together and anonymised, statistics which give insights into the viewing behaviours of the general population may be obtained.
"The Data Protection Act requires the collection and use of personal data to be fair and transparent.
"Once personal data has been effectively anonymised and individuals cannot be identified, then it is no longer personal data and the requirements of the Data Protection Act will no longer apply."