I have a simple confirmation process to ensure the person signing up is actually the owner of the phone.