What about in the situation where you're actually contacting other users on behalf of the registered user (think event planning)? In those cases, shouldn't you

What about in the situation where you're actually contacting other users on behalf of the registered user (think event planning)? In those cases, shouldn't you at least try to verify that the user is who they say they are? What are the alternatives?