I think the scheme they used was to require a phone number to set it up the first time, and after that you could switch to TOTP or whatever. Authy also harvests phone numbers.