Using Google Authenticator? Read this.
"It may collect data from at least eight different data categories, including your phone's contact list, the photos and videos on your device, plus your phone number and physical address."
@protonprivacy How else would they be able to hand you over to the authorities smoothly? I got chills when they forced cloud backup of 2FA codes on us.