But did you actually read that? It specifically doesn’t mention the obvious data that they do have (phone and IP), but instead focus on other sensitive metadata:

> variety of information we don’t have, including the target’s name, address, correspondence, contacts, groups, calls.