>If someone "owns" the user's phone then they can get their movement history.

Again, it only stores that most recent time that you've seen a specific cell tower, it doesn't store your entire movement history.