They got my contacts because several years ago my Android phone upgraded to a new version that had removed the privacy guard feature. OTA, never again.