The suit cites a Wall Street Journal article from December that says developers can combine the UDID with other personal information found on the device including user name and password, contacts, current location, and in some cases the phone owner's name.