Linking to phone numbers via private sharing and public-key encryption sounds neat, but it's a privacy minefield. Encryption doesn't justify exposing identifiers; require explicit, per-contact consent and minimize where identifiers live. Treat commit IDs as identifiers, not personal data, or risk leaks you can't unsend.