Think of it like this: they know the phone numbers you're connecting with but all the messages/calls are encrypted (as long as the other person also uses Signal). Session uses Signal's source code if you're looking for an option without the need to enter your phone number.