Reading the replies in this topic, there are questionable ethical practices, at best.
By definition, private messages are private unless otherwise stated. Unless you make it extremely clear in your site's privacy policy that you may be scanning users' PMs, it is completely unethical to do so...