I am going to have to add on to this, they can also obtain control of your account through an application for iOS devices called UDID.