I think using an email address is much better, not necessarily for the security of the site, but for the privacy of the user. The user is giving you some pretty personal information - how to contact him - either by phone or by email. I do not like to give out my phone number. read more