No worries. It depends on how the verification process works. If it's using something akin to SAML based then all it's doing is verifying with the service provider, and that's OK.
If they keep the ID data, don't hash or encrypt it or both, then that is a big problem.