I read your notes as if you would belief privacy would be a lost case. Period.
I want to encourage you. Privacy is a multidimensional spectrum, which is never won or lost completly.
Every datapoint about you can be published (by you or a third party). This does not mean that everyone around you will remember this forever.
And even when a company stores it forever. This does still not mean, that whatever person can access this data.
We can always act in ways, that our data are kept in more private ways or less. By some measurea there is always a way to get every data point about anyone.
The importancy is in not offering for too low of an effort. When someone wants my private fotos, then someone would need to steal my phone and hack their way through my encryption. I am fine with this.
When someone needs my location, they would probably need to request the data from my ISP. When someone needs to know what websites I visit, they would need complience of a tracker, which tracked me or my VPN-provider.
All this is possible. I just think for my threatmodel it is unplausible. Know your threatmodel and you know what you actually need and what fears are far above your needs...
