We must not rule out the possibility that rogue apps are siphoning data for ad targeting, especially given AT&Ts Privacy Policy: "We do not use the content of your texts, emails or calls for marketing or advertising".

AT&T _could_ choose to violate this policy but I imagine it would open them up to legal risk that they would not want.