Tangential, but: we only have "find friends" by email, not phone, but we use a one-way hash of the email for the request so that our servers don't get sent emails that we don't already have, which helps a little though not with the SnapChat issue.