A social sign-in flow can provide more information than a small client portal requires. I start with the fields needed to recognise the account and connect it to the correct records. Additional information should have an understandable purpose.
A provider identifier and display name can support that basic relationship. Contact information needs its own clear use and validation. Reducing the stored data makes it easier to explain the account experience and maintain the information responsibly.
