Phones are masked on screen by default — click a number to reveal it. Consent status is enforced server-side, not just hidden in the UI, and there's no manual upload so this list only ever contains people who genuinely opted in.