Many Android apps pose privacy threat, says security vendor

IDG News Service - As many as 20% of applications on Android Market let third parties access private or sensitive information, according to a report from security vendor SMobile Systems.

SMobile, which develops software for protecting smartphones, has performed an analysis of over 48,000 applications available on Android Market, and looked at what permissions are granted to the application by the mobile operating system.

The permissions -- which allow applications to do a multitude of things, including initiating a phone call, reading SMS (Short Message Service) messages or identifying the phone's location -- are there to help people develop useful applications. But applications might also access those kinds of personal data for nefarious purposes, according to SMobile.

Related Blogs

Jonny Evans:
Revealed: Why Android beats iPhone for organized crime

In addition, some 5% of Android apps can be used to place a call to any number, and 2% of applications can send an SMS to an unknown premium number, in both cases without user involvement.

A majority of these applications were developed with the best of intentions and the user data will likely not be compromised, according to SMobile. But there have been cases of the opposite: A bank phishing application that was published by an author by the name of Droid09 was found and removed from Android Market, it said.

Android's security model requires that applications declare the permissions they will be using prior to installation by the user. An informed user can use these declarations to decide if they want to install an application or not, according to SMobile. However, the fact remains that there is no means available for a user to know for sure that the application they just downloaded is doing only what the user sees it doing, it said.