I vote for 3rd Party
Having a custom email address for my account, I have yet to receive any spam to this address. Oh, I have never signed up for any 3rd party apps either. But if it is a 3rd party then there is almost no way to track down which one, or whether your files have been compromised.