Ultimately here's what I suggest on the SSN issue which is what I consider to be above the line and entirely acceptable...unless you truly are dealing with people for whom you'd want no association. I still struggle with companies asking for this, regardless. Anyways: