and this is why i'm paranoid about mine. i tell people all the time have the lock code on. it's a pain in the butt, but if you lose your phone, forget it and someone picks it up, they have access to a lot of your data. I know i have a lot of things auto logged on (like papa johns mobile site, do i want some stranger ordering pizza until my bank account goes dry?) and I keep a list of my passwords on there.
Probably a bad place to keep them, but when i'm at work logging in to pay bills and I can't remember that sites log-in, it's a real pain to ask for a reset and then have a new PW to remember or change.
honestly, i've actually thought that something like that could easily happen. this is why you don't give strangers your stuff to 'see.'