It looks like what's sent to Xiaomi is Telco information, IMEI and Phone-number(s)of: the device owner, all contacts, and anyone who's called or texted; if you

It looks like what's sent to Xiaomi is Telco information, IMEI and Phone-number(s)of: the device owner, all contacts, and anyone who's called or texted; if you enable their cloud services IMSI is sent as well. The lack of ssl is far and away more surprising to me. If they're really sending the IMSI(and not a randomly generated Temporary) in the clear over http..... That would be a glaring oversight.