Cory’s phrasing suggests that the Amazon purchase history was gleaned from the gentleman’s e-mails, not from an app. Whenever I buy something from Amazon, it sends me an e-mail confirmation, a copy of which gets stored in my mail client. This information would certainly be visible to someone searching my device offline.