The way I would do it is store their real email address and then when anyone clicks the "Email this person" link take them to a form where they fill in apropriate fields (from, to, subject, body etc.) and then this gets submitted to a script which sends the email. Their email address would never be seen by the outside world.