Every private phone number counts as personal data and is therefore fundamentally subject to data protection.
According to data protection, the storage, use, processing and disclosure of a phone number is only permitted if the person concerned agrees to this, if a law legitimizes this or if the data is publicly accessible.
This is an almost literal translation from official websites that I found in France and Germany. As a rule, a layperson has difficulties to analyze the situation because there are sometimes permissible exceptions in.
If Google Analytics is involved, the answer is arguably a little easier. GA is already subject to restrictions in some countries. In Germany GA can only be used under severe restrictions if it is not already prohibited (websites of public administrations in Brandenburg).
Regardless of this, some Google services in the United States are also suspected of violating privacy rights, such as the threatened class action lawsuit in San Jose from May 6, 2021 shows.
If the data from the most diverse sources is brought together (and Google is suspected of doing so), then a person will fundamentally be transparent. It’s not about an algorithm that just prepares this or that nicely, but about microtargeting, where people are only given the information they are receptive to. This requires the most extensive data collection possible. Ultimately, it is about a political dimension that does not belong here. But if false claims are made, or these services are presented as normal or desirable, then one should not be surprised at counter-speech.
You are also wrong in your assessment of the telephone number. If you read the post Calls Hanging UP from last week, then you can easily derive from the thread which company, including telephone number, address data, and more is meant. The writer wasn’t really paying attention. Basically, every interesting element of a SIP header could be passed on to Google for further processing.
For us this means that we have a problem when we offer small telephone systems and the customer believes that the device spies on him. It just doesn’t make sense to offer devices and services here anymore.