“Using an accurate database of mobile phone number prefixes and very few resources, we have queried 10 % of US mobile phone numbers for WhatsApp and 100 % for Signal.”
Contact discovery uploads your address book so the app can find your friends. It also lets anyone check whether any number uses the app. The researchers ran every US mobile number through Signal. Hashing the numbers does not help when there are only so many phone numbers to try.