Certainly the phone manufacturer (and OS provider if different) can have a go at anything they want. I'm not sure what all counts as "getting data off" the pho

Certainly the phone manufacturer (and OS provider if different) can have a go at anything they want. I'm not sure what all counts as "getting data off" the phone, but some other methods of smartphone tracking: - wifi (sometimes even if wifi is "off") - EXIF on photos you take and share - QR code usage - public USB charging ports Then there's cross-tracking by other means. It's likely someone has enough data to associate your phone with your credit or debit accounts, or a public transit card, or vehicle plate numbers & toll tags, or with your face and voice.