Reply to post:

However, while IMEI is used to authenticate, it may not actually be stored anywhere

I think you will find that under data retention laws, mobile operators have to store the IMEI. For at least a year in many countries.