You got that right. There are various statutes dealing with certain types of data, when using governmental computers, etc., but there's only one I know of which comes close that that's the statute against surveillance in a "private place." That statute has this qualifier - "but such term does not include a place to which the public or a substantial group of the public has access." There is a tort (civil action) for invasion of privacy in Alabama. However, if you leave a non passworded cell around where it can be recorded, I'm afraid you'd have a hard time building a case there - just no reasonable expectation of privacy...I believe only the government and google can legally invade cellular privacy...