She should have kept it locked with a PIN, and not let him use it - sounds like he's not to be trusted…