They could also just continue collecting data while the mic is muted and hold that until the next time the device is unmuted. Then upload their spy data at the same time as legitimate data to hide it.