they steal private information but only the one that is stored in the device