Auto-matching just on names is dangerous - how many John Smith's are out there? Auto-matching on something unique (eg, email address) should be fine.