Best practice to use your non-primary email address for these kinds of site. Data breach is a matter of when, not if, it happens.