Seems more and more sites now are going away from having users sign-in via an email and allowing them to sign-in via their phone number. User enters phone number and generally authorization code sent and entered before allowed into site. Not sure if there are regulations to have users sign-in particular way based on the information that could be stored, but just an idea to potentially allow login by phone number in addition to email and password.