As I've stated several times, my site doesn't store any details like these, it uses OpenInviter, they authenticate the credentials, pull back the list of contacts, I process the list of contacts and check it against the database of EXISTING hacked email addresses. The credentials you supply and the email addresses I pull back are NOT stored anywhere.