Who can see my email address and phone number?

Nobody, unless you choose otherwise. Both are private by default and there are individual switches for each of them in Account Details under Privacy.

Turn one on and it appears on your public profile — which is a real profile page on the open web that anybody, signed in or not, can read. That is worth thinking about before you turn either on.