Assuming that one phone equals one person gets us into all sorts of trouble when it comes to identification and access to data – and the potential abuse of both.
One phone can be accessed by more than one person, knowingly or unknowingly. One person can have more than one phone.