I have a gmail account. I gave my password to a friend. A week later I get a security alert from Google that an iPad user has changed my recovery phone number to my friends cell number. He doesn't own an iPad and claims he has no knowledge of who did this. Does this seem reasonable? Only my friend...