Wow that sucks man. I wonder if there's anyway to track it like serial number or stuff like that. About them finding stuff about you though, I don't think that's really a big issue, because a lot of stuff requires your apple id and password, and you could always change your email password right now so if they try to view your emails it would prompt them for a new password. Basically though, I think everything on that device right now is sort of locked on that device, and if they want to use it as their own device with their own Apple id they'll want to reset and wipe it clean in order to do that. It's not like you're the president of the united states so they don't really care, they'll just wipe it.