There should be an option at the contact level to ask for verification of the contact information every X days. Google does it. Yahoo does it. Facebook does it. When the user logs in the next time, it would take them to the contact information page and prompt them to "It has been a while since we've verified this information. Is this all still correct?"