I guess it depends on a few things. LSPs can usually identify either the sender *or* receiver + amount. If both users are using the same LSP (or colluding LSPs) they can identify both sender *and* receiver + amount.
https://phoenix.acinq.co/faq#how-private-are-my-payments-on-phoenix