Why are they even storing phone numbers in plain text. According to their Privacy Policy, the numbers are only used for finding friends; i.e. they look up your contacts from their database.

In which case, to do that they do not need the plain phone number, but only a hash derived from it. This is like storing passwords in plain-text.