i would not use a uid tied to the users account as a security precaution. never lend out more info than you need to. i would make it an user defined string.