Blaming Spotify for this is like blaming the company that made your TV for showing you ads that are part of the broadcast. Unless Spotify makes the specific podcast you’re listening to, they’re just playing you the content someone else made, including the ads they included in that content.
How exactly is it hashed? There aren’t that many possible phone numbers, so it might be viable to just try every valid number until you find one that matches