Imagine you are developing a "free" app for android & iPhone and want to refinance yourself through using some sketchy ad service. Does an app developer have to worry that the ad content he embeds can access information such as the user's phone number or maybe even his phonebook? Furthermore, is there some danger that the user's phone number can be made public if he clicks on the ad?
Naively I would imagine that all this information is safe on both android and iPhone. Hearing from many stolen phone numbers I was however wondering on what technical ground the access to such private information is "granted"?
I'm happy about general answers or more specific answers just covering one device type.