This doesn't seem any more secure than broadcasting SHA256(phone number).