In any case, the right approach is to avoid sharing personal information and to warn against such requests. Also, to inform them that I can't assist with that. Possibly report the query if it violates policies, but as an assistant, I need to handle it by refusing to help and explaining why.