One thing I'm a bit uncomfortable with on the Dropbox referal system is that once you refer someone you get their email address (https://www.dropbox.com/account

One thing I'm a bit uncomfortable with on the Dropbox referal system is that once you refer someone you get their email address (https://www.dropbox.com/account/referrals https://www.dropbox.com/account/referrals). I'm not sure if that's really right as all our referrals come from clicks on a link on one of our tutorials and they will not be aware I now have their email address. It's a pretty good phishing opportunity (eg, thanks for installing DropBox yesterday at 1.30pm, please login here for extra free space!). I emailed DropBox about this a month or so ago but didn't get a reply. DropBox should be especially sensitive to opportunities for phishers in my opinion!