Except they don’t. They may request a passkey which is just an oversimplification about what is going on behind the scenes, with information being passed back and forth as Steve described.

But the private key never leaves the device. This is such a huge distinction that is easy to overlook. But it is very, very important.