If they do stuff like that, they will probably deny that they did it. Having had access to your phone, they can look for information that can be used to find other leads, that will be strong enough for a court order.