This is one of the reasons why I always advocate never using the vendor software on a device and always replacing it with a new OS of your own choosing.

Note of course that even common Linux distributions have privacy issues, here are the ones that we knows about for Debian:

https://wiki.debian.org/PrivacyIssues