Here’s what moxie said:

„[..] Signal has always done contact intersection with an ephemeral query of truncated hashes of phone numbers.„

See also https://news.ycombinator.com/item?id=11979748