Spyware backdoor prompts Google to pull 500 apps with 100m downloads
arstechnica.com
arstechnica.com
But let's look at what the spyware does:
makes it easier for apps to connect to ad networks and deliver ads that are targeted to the specific interests of end users
...
The most serious spyware installed on phones were packages that stole call histories, including the time a call was made, the number that placed the call, and whether the call went through. Other stolen data included GPS locations, lists of nearby Wi-Fi networks, and lists of installed apps.
How is any of that distinguishable from what Google/Android does routinely? The only difference is that some people trust Google and/or their phone manufacturer with this. We don't "trust" spyware.
Users volunteer their call history to Google Voice to get call forwarding and visual voicemail. Users volunteer their GPS data to get crowd-sourced traffic information.
Yes, there is a privacy policy, and companies like Apple and Google take that policy seriously.
But, question 100 random iOS or Android users and ask them if they use Apple Maps or Google Maps. Many/most will say "yes". Then ask them if they realize that their phone is uploading their GPS location in real time to Apple or Google, and probably 90% will say "no".
So I don't think there is "informed consent" for most consumers. It's more like "this works, I love it, I don't want to know how it works". Google and Apple make an attempt at informing people by having them click on various agreements that nobody reads, but I'd call the result of that more "indifference" than "informed consent". When is the last time you ever read any of those things you clicked thru? For me it's probably been decades, perhaps as far back as the 1980s.
Stuff like Google Voice is another thing entirely. It's not really a mainstream product, it's more for geeks. The types of people who use it are generally quite cool about giving Google their personal information.