Phone repair shop wanted phone password

This may not be the right sub to ask, but figured I'd start here. Just took my galaxy note 8 in for a screen repair through my carriers insurance and had to go to the town over to find an authorized repair shop that would cover it. Drove it down was told itd be the next day when its ready and drove back to town. Bout 10 mins after I got back in town, the guy calls me saying he needed some personal info from me (name address phone number) then asks for the phone password. Now I purposefully setup the phone to have an 8 digit pin so they wouldn't be able to access it. When I told him I wasnt comfortable with giving it to him, he said he just needed it to run a test samsung has them do to phone repairs to check on everything. I told him that was fine but still wasnt comfortable giving it all out. So I told him I'd call him back. I hung up and called their corporate number and they verified it was necessary. So I called him back and apologized, told him it wasnt personal, but I'd come pickup the device, take it home and back everything up, then wipe it and bring it back unlocked for him to run the repair. He then told me he was already almost done fixing the screen and that I could come in the morning and he would do it all in front of me so he wouldn't be left with the phone without me. I appreciated it and told him thatd be fine. Went in this morning and he just had me sign the receipt and sent me on my way not even mentioning the test or anything of our conversation. So I'm wondering, are there laws that protect consumers that would protect us from this sort of thing? (Florida btw) my wife needs her screen done next and it's a Samsung s8 that I have to take to the same shop. I'm wondering if theres a way to setup the device or use a program that will watch the phone and tell me when we get it back, exactly which programs were accessed and when. I want to see if I had reason to worry and if theres any legal repercussions that could come of him looking through her device. I'd obviously clear any sensitive info or pics from it beforehand but make it look normal just to see what they'd do. Any advice?