Hello,
I have notices that password recovery section is not limited on email address guesses and whats even more suprising recovery form actually answers if this email address is registered user, so any 3rd party can try to guess email addresses of geni.com users and store this information for themselfs.
As your service user, I would like prevent my data leak.