requires either phone or email, not both