Imagine all the things their phone app can exfiltrate. All vaguely categorised in privacy policy of course.