I'm surprised there aren't hackers out there that have created a cell phone tower in a box to obtain all outbound traffic from a device and reverse engineered all the comms chatter to be 100% sure what's going on with phones.

Given that these devices exist and are in use by law enforcement to catch criminals, we know this is feasible.