Yeah, that would be a problem. I'm thinking it could just send the first part of the email address (before the @ sign) or instead just license an encrypted blob to the company which they can run.