[Spivak]

I suspect it's something like Facebook knows both your and their phone number, sees a WhatsApp messages between them, and connects the dots. Technically there wasn't any contact sharing.