[jounker]

Isn’t the entire point of a cryptographically secure hash that you can’t derive the original information?

[charcircuit]

You can't derive the original better than guessing. With public identifiers you can just take a list of them and guess with those. If someone asks for your email they can hash it themselves and compare it against whatever databases.