Using Google Authenticator?

Using Google Authenticator? Read this.

"It may collect data from at least eight different data categories, including your phone's contact list, the photos and videos on your device, plus your phone number and physical address."

Just a moment...

(www.pcmag.com)

@protonprivacy "It MAY collect..." What does that even mean in practice? Why can't we have some concrete statement about this data collection?