Why do they upload real data? Do they sell it? What happens when they go bankrupt?
Hashing doesn't really solve the entire problem, though it does prevent the service from getting addresses it doesn't already know. Allowing an app to see your contact list is an act of faith.
Maybe bloom filters can save us? :)