Telling the user that the account doesn't exist is bad practice. Hackers can use it to find out who has an account on what platform and more directly target them with phishing emails