If a user types 2-1234 as his phone number, and you store that, you will not be able to call him later, completely defeating the purpose of asking him for the data.If you are not sure that you can remember to validate everything, use a language that taints incoming data and kills the program when you use it.