Twitter used phone numbers provided for two-factor authentication to target ads—just like Facebook did before.