Has anyone else gotten an email from someone they know asking to help them update their address book, and then you’re asked to give info to a third party, Plaxo? Does this make anyone else nervous?

I get enough spam now, and the emails look automated, and I certainly wouldn’t want to be sending any spam out myself unintentionally. The addresses that I got were forged, as I could see when I hit ‘reply’ to those emails. I don’t know who Plaxo is, and i know that their privacy policy says they won’t share that info, but they can change that policy any time, or they could be bought by someone else, or their servers could be hacked by spammers. It sounds like a really bad idea to me. Does anyone have any more info on this?