They only had access to stuff stored on the cloud (iCloud) and not on the phone itself. What gets sent there depends on the user's settings, but these are the defaults:
- Purchased history for music, movies, TV shows, apps, and books
- Your iCloud backup includes information about the...