Don't be silly. Google's own dashboard shows that the vast majority of devices are running old versions of Android with known security vulnerabilities:

https://developer.android.com/about/dashboards/index.html

Besides that, most likely >99% of the users are using a device with Google Play Services and other Google applications. It is no secret that Google mines pretty much all data available for advertising purposes (as outlined in their privacy policy).

Moreover, most Android devices use no or weak device encryption. The Google App Store has a rich history of applications slurping all kinds of data (though things will probably get better with fine-grained permissions).

And then we haven't even talked about Asian and American vendors that 'accidentally' install third party spyware:

https://www.cyberscoop.com/android-malware-china-huawei-zte-...