But Signal requires a working phone number for registration and it knows the phone number. The backend could be modified at any time to store this somewhere else while maintaining end to end encryption between the two parties communicating on it. How can Signal prove continuously that it doesn’t store or disseminate the phone number? I know in past precedent it has told courts that it only has very limited information (date of account creation and the last time of account access).