I am putting together a summary on iOS and Android security risks based on app permissions. On Android, it is easy to define all of the permissions and what 3rd party developers have access to (from the Android Manifest Permission page). On iOS, I have not been able to find a comprehensive list of what 3rd party developers can potentially access (maliciously or not).
For example, can iOS developers access data from the native iOS mail/calendar/contact applications? Does anyone have a link to a list of what can be accessed via the iOS APIs?