Only now you knew?

The ones openly doing it are WhatsApp and Telegram

With Telegram, if you don't give your info or click on links, you should be ok, but with WhatsApp, you'll even get notifs about calls and texts from godknowswhere - with actual numbers and time of call