I mostly agree with you, but my issue is that they were not using the hash of the emails. You can still match friends and alert users when a friend joins by onl

I mostly agree with you, but my issue is that they were not using the hash of the emails. You can still match friends and alert users when a friend joins by only storing the hash of an email. Why store the whole address book unless you want to use it for other reasons? Would path take on the privacy flack and security risks for storing personal data just for friend matching?