Comment by chaz

One of the comments explains it -- the mobile app uploads all contacts. So when he entered in his phone number, existing Facebook users using the mobile app were matched because they had his phone number in their contacts.