Besides, if it wasn't violating privacy, the numbers are worthless because they have no way of knowing that each number represents a user; someone could be spam

Besides, if it wasn't violating privacy, the numbers are worthless because they have no way of knowing that each number represents a user; someone could be spamming them with false numbers and, without being able to weed the random ones from the real ones, they'd have no way of knowing.