Even if Twilio did leak the fact that the author signed up to Facebook it is still a lot better than leaking every single merchant to where the user has been.
I am aware of this. I just don't understand what Twilio will gain from sending every single phone number you provision through them to Facebook or another advertising partner. It would actually pollute the data if they were to send these events from a high-volume customer that resells Twilio numbers to their own customers (who aren't doing business directly with Twilio and most likely aren't aware of it at all).