Use the authenticated carrier profile or document controls. In Android, open Account and the available profile/document actions; check the resulting document list and status. Upload sensitive documents through those controls, not through ordinary support chat, email attachments to strangers or public links.