This is a dumb story, ginned up because it’s “<bad thing> + <apple|tesla>”.

This happens with any rental car or and car transaction.

Also, end of the day, this data isn’t particularly sensitive. Your state DMV provides your registration and license data in real-time to third party data brokers. Cellular carriers sell geo data. Its pretty common for folks to have contact lists slurped up by third parties.