Well, from what I can find it doesn't seem that much of an attack vector --

-- My phone does not have 2G compatibility, this probably only tracks location if you've switched on location services and I'd wager most people use IM calls and texts rather than cellular. If the phone is old enough to have 2G or 3G, perhaps there's a threat. If you live in the US it's ironically probably smart to leave it on -- state forces are a bigger threat than malicious conglomerates atm