When giving loans, we have something called references, who are people the lender can request to get the loans repaid. We are using the user's contacts in the same way.
A reference without their prior consent though, apart from the obvious unethical issues with doing something like this I can't see how it can possibly be legally binding if the referee had no say in the matter or signed any contracts?