Is there a reason for the excessive amount of personal data requested for being able to use the API?
Under the GDPR any data collected needs to be for a specified reason and the data collected needs to be the minimal amount required.
Having to provide a physical address and phone number along with a full name to me seems like excessive data and opens up a significant attack vector if the TMDB database is ever compromised.

I couldn't find anything in the usage agreement that justifices this level of personal data being collected.

Thanks