NQ Mobile is not really new to some sloppy ethics.
http://www.forbes.com/sites/afontevecchia/2013/10/24/nq-mobi...
link to original muddywaters research: http://www.muddywatersresearch.com/wp-content/uploads/2013/1...
http://www.forbes.com/sites/afontevecchia/2013/10/24/nq-mobi...
link to original muddywaters research: http://www.muddywatersresearch.com/wp-content/uploads/2013/1...
The same technique is followed by several Chinese mobile companies. I don't think its well understood why these companies are buying installs and where the money is coming from.
Here are the top ten Tool in India. 8 of 10 are by Chinese companies (Primarily by buying Installs. I am not saying all of them but most of them are). India and China have Conflicts. Tools is one category that require scary permissions.
That being said, those that do not have the skills to realize that this is not sufficient need to reach out to those that do. If you organization does not have security staff, then a contracted audit is necessary. If someone is producing a product and are trying to claim it is secure, ignorance of what secure actually is, is not an excuse.