The phone collects data and stores it on device. "Collect" data does not mean "transmit" data. After data is stored, it can be extracted by attackers who explo

The phone collects data and stores it on device. "Collect" data does not mean "transmit" data. After data is stored, it can be extracted by attackers who exploit a vulnerability in the OS, or by anyone with physical access who finds out the passcode. (eg. by coercion, by camera surveillance, or by simply looking over someone's shoulder) If an operating system truly put privacy first, all that data would never be stored in the first place. Obviously it's a tradeoff. If you want smart recommendations and all the "AI" features, you need to collect and store a lot of data. If you value privacy above all else, you have to store as little data as possible, and you have to say "no" to features that require analyzing a lot of data.