I recently took my phone to a mobile repair service (unofficial, 3rd party). The phone had fallen into water and had severe water damage - it was non-functional, I was not able to turn it back on and so far the service has not been able to get it to turn on.
I have a mild suspicion they might be doing something shady. So I started thinking - what sensitive data could they possibly be able to access?
The phone model is OnePlus. It's locked with fingerprint, and pattern, which I did NOT give to them. Also, the phone did NOT have full disk encryption, unless there's some kind of default one.
Edit: Phone model comes with Android 6 out of the box, but 90% sure it was upgraded to Android 9. Also, SIM card was removed, I did NOT give it to them.
I'm mostly concerned about:
- 2FA - AFAIK these are encrypted and impossible to access without unlocking the phone.
- Google Account passwords (the ones that are auto-saved by Chrome) - I'd assume these are also encrypted, hopefully, someone can confirm that.
- Photos - since disk encryption was NOT enabled, I'd assume these are freely accessible if you take out the data drive and put it into some special device that's able to read the data?
- SMS ???
- app data - notes (Evernote), FB messenger, WhatsApp, Telegram ???
- cache/temp data ???
- anything else ???
Any info/input would be greatly appreciated!