I sniffed the wifi communication of my android phone few days ago. Without your consent, It sends out your sensitive data to multiple domains even if you dont have account on them.
i havent decrypted the data, but the quantity of data tells me it giving the sim/contact and gps informations to google and to the manufacturer, even if you dont have a google account
The data to the manufacturer was probably sent by the keyboard driver (xperia pro with built in keyboard), or the kernel itself. Which means they could have transacted every keypress.