She's wrong - the activation prompt ***'s out most of the email address. She likely had an emergency contact or 'lost mode' message on the device. The latter would still be present if remote wiped.