If you share the same email address then the apps on both phones may be synced.
Each phone should be set up with its own individual account.
Do you share the same computer?
Ok, that sounds very strange..
he should try resetting his phone to its factory settings in case it has somehow been affected by malware.
However, from most of your post it seems like he is just being very paranoid about it, in my opinion.