Even worse... Sounds like phone number is irrelevant, yet they collect it.
> It's used to store and retrieve your 2fa secrets in case you lose your device
The phone number doesn't store anything?
But if somehow knowing that phone number is a key to getting your 2FA secrets, you'd have a bigger problem.
Except it often is, and that's the problem.
https://authy.com/blog/understanding-authys-multi-device-fea...
Using the device advertisee ID that the user is entitled to change.
// Sorry, for a moment I thought you were serious.
Ignoring the security pitfalls of phone numbers, it really doesn't seem like these advertising IDs are a drop in replacement for using phone numbers.