**Describe the bug** We store phone number in mongo DB. It should be in cognito instead. As a general rule of thumb, mongodb should not store any confidential information (emails, phone numbers, etc.)