[fulafel]

In this specific case of a recovery email address, maybe there is something that could be done so that they wouldn't hold the email address itself. At least 2 options come to mind.