Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Imagine you are developing a "free" app for android & iphone and want to refinance yourself through using some sketchy ad service. Does an app delveloper have to worry that the ad content he embeds can access information such as the user's phone number or maybe even his phonebook. Furthermore, is there a some danger that the user's phone number can be made public if the clicks on the ad?

Naivly I would image that all this information is safe on both android and iphone. Hearing from many stolen phonenumbers I was however wondering on what technical ground the access to such private information is "granted"?

I'm happy about general answers or more specific answers just covering one device type.

share|improve this question

It actually depends on the implementation.

If the ad service just needs to pull a randomly chosen image from a website query then there is no risk at all there.

If the ad service needs a query to a page which needs to run javascript(Or other type of code execution) then there might be a information leak but ONLY if the app is able to do so for example with androids permission system an app that can only display UIs wont be able to read the phones data.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.