Both can be true. Probably shouldn't make a regular practice of numbing out to this sort of info with the platitude "Big deal, my phone and facebook already have my data anyway. Might as well give you my mother's maiden name."