Developer Verification - Is this a scam ?

I've just received two emails. One from Brandon Pierce via Box.com inviting me to collaborate and second requesting me to upload my ID documents to Box.com.

Is this really how Garmin are doing the developer verification thing or is this a scam? ie Sending out what looks like a very dodgy email request and then asking me to put my Identity information in the hands of a third party - ie. Box.com.

Assuming it's legit then this really concerns me from a Cyber Security perspective. What's happening with my data on Box.com. How will Garmin control it and delete it. Does Garmin actually have any serious way of protecting my data and controlling access when it is held in a third party service ?

Also, (And I'm just having a *** here) - what do I do if I don't have a passport, don't live in the US (and therefore can't use a drivers license) and live in a free country with less governmental oversight than some ie one that doesn't have a National ID card ?