Help explain why personal info is presented on Google by just the telephone number search

"creepy" i mean

So I was wrong, is not normal.

giving away too much personal data 

• She says she has been carefull not to give personla info.  Only to her gmail & facebook; everything else maybe just her telephone

many companies are allowed to sell them per TOS

• What is TOS?

many apps on here phone may collect this data

• We did talk about that and as she said, those apps she hasn't given info
• So maybe the apps permission has access to actual user account info of the phone like telephone, address, etc.? is this possible?

If she's lucky, then GDPR applies

• what is GDPR?

Thank u very much guys!!

I was about to close the question, but she just contacted me brainstorming of what she can do.  She told me and I wanted to pass it to u guys so as to get u guys input:

She is going to all sites she has her name and phone number plus address (she says not many).  She wanted to know th following steps to reduce this exposure (Google, Microsoft, Facebook, Amazon and games apps like hay-day and the likes):

• use virtual phone (like talkatone or similar)
• rent a ups store for Po and street address.
• and all her websites, change her name to something "not" related to her name.
• finally for websites that uses for payment, use PayPal or something similar.

-What do u guys think of these steps she's about to change?

- Any additional if any she can include?

- How long would it to refresh the website to show the new name, address emails, etc.?

Thank you for the info, but I have a conversation pending with her, what is your take on what she told me below:

• use virtual phone (like talkatone or similar)
• rent a ups store for Po and street address.
• and all her websites, change her name to something "not" related to her name.
• finally for websites that uses for payment, use PayPal or something similar.

Since concern is on her identification, probably the question what is then the ID used in all these

• use virtual phone (like talkatone or similar)

What are the credential used and where are they stored? If it is still at provider, and importantly registered, it still points back to her

• rent a ups store for Po and street address.

Same as above. It is even more revealing using her real address or she is intending to use fake ones which defeat purpose

• and all her websites, change her name to something "not" related to her name.

It is possible to delink from her but eventually if she is still using for transacting real matter she can still be subjected to identity theft

• finally for websites that uses for payment, use PayPal or something similar.

it is back to above and focus on stronger authentication like MFA

The objective is to make it harder for cyber criminal to login into her compromised accounts using strong authentication as they probably will not be able to fake her biometric (what she is) or possess her token or phone (what she has). The latter can be compromised so that is one factor to better protect it. Security thru obscurity has lesser effect to reduce exposure. I will invest more in MFA, having discipline to not repeat the credential (email, password etc) for all less important social website or services. Use a separate one or even disposable one and leave the main and permanent one for payment transaction. It is hard to delete our trail once we have it in internet, and I would say even photo uploaded can be use by cyber criminal if they do intend to target a victim. the safest is no to use internet but that is no longer effective and viable in this connected world.   

The objective is to make it harder for cyber criminal to login...

• Thanx for the info btan, and it does make sense, but no, that is not objective at this point nor of this question.   
• And yes, security practice like Two-Factor Authentication, long passphrases, etc. is good and the thing is, she has it set up.  Her "passwords" on all of her accounts are actual long phrases and each email login, website login not only setup with passphrases but also Two-Factor Authentication on all of them - so her objective is not to make it harder for cybercriminal to login into her compromised accounts rather what to do from this pint and on - (she feels what she has right is pretty strong).
• She just freaked out that by placing her actual mobile number, all her info was right there, splat on the screen.

She thinks that by doing the below, maybe it will deflect her info, that is she thinks if she does these changes, within 6 months to a year, when typing her telephone number again, will not show her info as cleared as it it now (i feel for her, she so paranoid because of what she saw)

Is there any truth of what she thinking of doing above?

Thank u for ur input