Yes, but the server doesn't know which of the responses is actually your friend, thus preserving privacy.
The hashing is so people can't easily get a list of all the phone numbers, which is easy to work around, but, then again, they could just hammer the endpoint querying for all the various numbers anyway.