If it is an Iphone, then he has here Apple ID login and password. He is probably logged in on her account and can see all her text messages and emails.

She should change her apple id password. He is probably tracking her via gps and the find her iphone app. This will change with her password change.

I would change her facebook password and email too.