UnifyID collected all my motion data. What rights do I have?

As an intern my former employer, UnifyID (https://unify.id/), had me run a mobile app on my personal phone that collected my motion data (raw accelerometer and gyroscope data) 24/7/365. After working there for a few months (and now leaving), I'm not comfortable with them having this data. What rights do I have to get them to "delete" the data? (Unfortunately, this data has likely been scattered to employee laptops, S3 buckets, Google Collab, etc. so it may be impossible for it to truly be deleted.)

They claim (although it's yet to be proven), this data can identify you about as effectively as a fingerprint or facial scan, so the raw accelerometer/gyroscope data is at least conceptually PII.

More generally, as an employee in company that collects data, how do you draw the line between doing your job and fulfilling your employment vs. breaching your personal data boundaries?