Honestly, at this point I assume my email and phone number have been exposed to so many people's insecure methods of storing them (recruiters, friends, family, coworkers) that they are essentially public domain.

Not that I want them to be, but such is life. I don't answer unrecognized phone calls, and my spam filter does a decent job. And where these could be used as login I try to use random passwords.