Oh. Wow. It's not just the android app, the mobile web interface does this too.
And it's not just email addresses, but the full "About" section of the profile as far as I can tell.
Take my friend Alice, for instance. In the Web UI, I only see that she's a student and identifies as female. On the mobile site, I see her email address, her Google Talk address, the fact that she's online, her mobile phone number, and her home address.
What's odd now is that he's updated his profile and his droid phone doesn't show the other addresses and mine still does. So maybe it is address book based, somehow.
Edit- Pretty sure the persistence after he deleted them from his profile is the address book, but also verified the one address isn't in my book. He must have exposed it on his profile without meaning to?
You could also raise the issue to a community manager: https://plus.google.com/109895887909967698705
I like Plus overall, as FriendFeed 2.0 if nothing else. I hope they can fix these sorts of issues quickly.
That sort of seems like modifying FOSS and not bothering to contribute back your modifications to the original product because "from experience most FOSS projects don't bother about my code". (And yes, many FOSS licenses require you to provide your code if you distribute. They don't, however, actually compel you to actually submit it to the original project.)
In my eyes, it's about common courtesy: If you sign up for testing a product, you report your findings. That said, I'm not saying you have to, I'm just saying that by providing your feedback, specially when they actively are seeking it, you might help create a better product.