For a while I had enabled Messenger to handle texts on my phone, because it kept nagging me to do so, and also the one built in to the phone was terrible. So that means for a time they saw all my github/gmail authenticator login codes, delivery notifications, etc. I'm sure that's all somewhere.