An attacker who compromises a phone can, for example, track the owner's location by GPS, use the camera to see the phone's surroundings, or turn on its microphone to record conversations.

Huge amounts of private data: text messages, photos, emails, location data, even what's being picked up by the device's microphone and camera.