response 4 of 18:

Dec 11 16:02 UTC 2010

The way to do this without having any questions about privacy, is to
get permission from the user first.  I think it would be better to do
this than to assume reading private files is necessary.  If our current
process does not give contact information, that would be the place to
start, rather than assuming there is no other way to do things or trying
to justify such.