I have access to all of this data for other people because they sign up for services with the wrong email address (mine). Tying all security to only an email i

I have access to all of this data for other people because they sign up for services with the wrong email address (mine). Tying all security to only an email is dumb for important services.