I'm not saying you need Nostr or relays to communicate the data but you can use the same private & public key logic for sign up & login.

It can all still been hosted privately on someone's server. What they aren't hosting is your phone number or email address.