@dansup @pixelfed
You could overcome the privacy implications by uploading the hash of the email or phone instead of the real contact and matching against it. I think Have I been pawned does a similar thing for the email matching