This is typically done as a backend action, not from a public client.
The user would request an email change, and your app would make a request with an access token to your backend API. The API would then request a management API token and update the user’s email or phone number via the patch_users_by_id endpoint.