Once an app is on your phone, then it's certainly easier for the app to collect data across other functions on your phone.  But Claudius, the link you cited helpfully to the permissions that the Academia phone app has only includes collecting only the user's name and email address, which one would expect. I don't see anything more general than that, or anything that would explain what Harry is experiencing.  (Harry, do you have the phone app?)