Phone number is definitely PII and can easily be used to de-identify. Mac address is better, but still not great. A Google or dump specific id would be best
Systems to associate 'burner' phones to individuals, with patterns of metadata, have been commonplace for decades
https://github.com/kimgr/asn1ate/blob/master/testdata/public...