As a net/sys/db/sw engineer for a few decades plus, I know the ins & outs.
I am particularly sensitive to this as that element of my work is extensively medical & insurance related and heavily government regulated.
Additionally my wife is an insurance business executive.
Also as an entrepreneur in a completely different industry as well, I refuse to share contacts with any app.
Contacts are not stored in google accounts, this is for my customer privacy.
My communications with customers is via my db driven mail list domain, a hassle for scripting but privacy protected.
Purposefully do not have tracking active on devices.
My friend nor I use facebook et al or social media aside from work/business (in my case approaching 8 years).
What I have found is always listening devices aren’t active but do flag keywords.
Download your device data, cross reference passive convos to ads parsed.
There are instances beyond coincidence.
I heavily filter & traffic redirect here, to log not block, so I can track what is incoming, then do monthly filter tweaking accordingly.
I am past debunk.
Now is he as crazy as me & locked down?
Hell no, so what he uses (ie maps/FmP/contact storage) is likely far more exposed.
Is what he experienced, vs what happens to me, vastly different?
In this case, we had not discussed anything non verbally, it was a spontaneous convo, we had not corresponded, searched, nada.
Is it possible he queried something long ago, of course.
But not recently.
Have we spent time recently socializing at each others homes not broaching the topics recently before this instance? Yes.
Stuff happens, it is not just anecdotal.
Likely not as frequently as people suggest, but it does happen.
Anyhow, I made this way OT, my apologies, if to go further, I suggest this convo live elsewhere than this thread