Metadata tends to be easily gathered. Much easier than the contents themselves and very amendable to network analysis. That's why each and every online provider would love to have access to your phone's contact list.

Does he apply his personal approach when handling my mother’s maiden name, my birthday, etc.

This often means running blog posts past my housemates, or phrasing experiences in ways that reduce identifiability or at least give plausible deniability.