根据报导以及后续研究：
疑似就是把某个似乎是高通为中国做的 apk 放到部分非中国版的 Nokia 7 Plus 上，
但在二月份的更新修正了。
最原始的报导，有兴趣可以用 Google 翻译自己翻一下。最后也包含了 HMD 的说明
https://reurl.cc/OMdpX
引用一下 Android Authority 的报导以及报导中引述的调查
https://reurl.cc/LWYX7
https://reurl.cc/3XG3O
"Oddly enough, the code for the Nokia 7 Plus's data collection method was
reportedly found to be similar to code on Github by Qualcomm. So just what is
actually going on here?"
"Was this purely an accident?
It's believed that this data collection was intended for Nokia 7 Plus units
in China, but it may have accidentally landed on devices outside the country.
Furthermore, security researcher Dirk Wetter reported that the culprit could
be an APK package named “com.qualcomm.qti.autoregistration.apk.”"
"...
a software update was issued at the end of February to fix the problem
... "
※ 引述《testid (测试大王)》之铭言：
: 根据外媒报导
: https://bit.ly/2HxpMKh
: 及原始芬兰文章
: https://bit.ly/2Y8f3uV
: HMD已确认部分Nokia 7 Plus手机不小心把
: "中国版本才要的"回传资料机制包进去了
: 并已在二月份更新中修正
: 至于回传了什么
: 报导说每次开机或解锁时就会回传以下资料
: IMEI1
: IMEI2
: SIM1CELLID
: SIM1LTEIMSI
: SIM1ICCCID
: MACID
: 以上