Using Google Authenticator? Read this.👇

"It may collect data from at least eight different data categories, including your phone's contact list, the photos and videos  on your device, plus your phone number and physical address."

https://www.pcmag.com/reviews/google-authenticator