Why don't u use locate iPhone option. He can't do any thing with out your Apple ID details...if he resets phone it will ask for ur Apple id password...or u can login to ur iCloud and lock the phone with a welcome message to contact you?