Android's "permissions" in the market aren't looking so bad now are they?
I am normally careful to check permissions, but foolishly installed Skype app (I think Skype uploads complete phone address book when first run). And I wonder how many PhoneGap based applications (iPhone or Android) have XSS flaws that a hacker can springboard to snarf the local address book???!!!
XSS flaws like: http://www.theregister.co.uk/2011/09/20/skype_for_iphone_con...