Traditionally if an account reset email is sent out you didn't trigger, it's a huge red flag. With this proposed approach, especially on a location based servic

Traditionally if an account reset email is sent out you didn't trigger, it's a huge red flag. With this proposed approach, especially on a location based service like foursquare, getting access through a sniffed seemingly harmless notification email would most likely go unnoticed. The closest method to this I'd personally implement is a toggle option only, with no further access. Similar to a standard unsubscribe toggle link.