If my threat model realistically included all of those things, then I would be very careful about keeping any sort of address book or contact log/history at all. At that point the only defense really is just to try to memorize phone numbers. And only talk when walking together, mob-style.

Ha, fair. To me its about the concentration of "high quality' or juicy data that makes a person vulnerable. When the stakes get higher, threat, reward, and the temptation for bad action increase.

Btw on android it's easy to make contacts self maintained. And to use an open source messenger so texts dont go through Google's servers. Not same level you're describing, but a huge defense against these "social graph intrusions."

> And only talk when walking together, mob-style.

Both of you will be carrying microphones, walking past people who are carrying microphones, and being video recorded from every building and from the networked doorstops of family homes.