What if he&#x27;s using an Android phone? Most third party apps on the Google Play store have access to both your location and accounts.<p>I even remember seeing back in the day questions with valid answers on stackoverflow about how to get the email associated with a device without requesting the <i>accounts</i> permission, but some other close ones.<p>I also made the mistake of using a personal account with my first Android phone. I had zero spam on that account. 2 months later I was getting about 10 emails a day. (not targeted though since I didn&#x27;t live in an very active area)