You handed over your device to be fixed — not to be read.
Your device goes to the bench and the person on it has, in practice, root over everything you’ve ever saved. The honest ones never look. The parasites browse your photos, copy documents, read messages, and skim anything with a dollar sign or a face on it — because nobody’s watching and the data is right there.
Vague or dodgy answers about what they access and why. “We need your login to test it” for a job that doesn’t require it. No written policy on data handling. Reluctance to work in front of you, or to explain what they did.
Touches only what the job needs, tells you up front what that is, and can explain every step afterward. Works with the least access required — not a full sign-in — whenever the task allows, and treats your data as none of their business, because it isn’t.
Sign out of sensitive accounts and remove saved payment info before handing a device over. Ask directly what they’ll access. Better: choose people whose whole model is not harvesting you. Zero data harvesting isn’t a feature to us — it’s the rule.
This describes a common tactic and how to recognize it. It does not describe or accuse any specific business or person.