This is true of all social media. There are servers, be they centralized, federated or siloed, or p2p and those servers see the source IP. The difference is that my Nostr client has built in support for Tor while my Mastodon clients don't, and my Twitter client didn't. So it seems the Nostr clients that have thus built in are a step up from all the rest in terms of privacy.