I've worked in these contract cellphone repair/refurbishment facilities many years ago, the big warehouses where telecoms and manufacturers send these warranty phones to be triaged and repaired, and let me tell you, something like this is not surprising at all. Most of the people there did good work, but all it takes is one. Personally I'd never send my phone in to repair, and I'm skittish about buying any refurbishe…
Everyone made assumptions that the process for developing photos was anonymous and private - you dropped off a canister, and picked up photos and negatives in a clean, sealed envelope a few days later.
How wrong we were.
The process was semi-automated using these gargantuan machines in a back room, but the staff usually looked at each frame as went through the process. They made extra copies of spicy ones which went straight into a special binder kept on a nearby shelf. This shop had two or three of these binders.
Some years later I was in another country and photographed violent demonstrations right outside the hostel where I was staying. When I went to pick up the photos, the staff made it clear that they had seen the images. They were supportive (they wanted to get the word out internationally) but what if copies had been sent to the local intelligence services instead?
Nowadays the tech is different, but when there are no barriers to viewing private information, we see similar types of behavior.