I forgot to mention, all cellphones come bundled with vendor installed spyware. CarrierIQ is one such example, now owned by AT&T, but there are many of them. They will tell you it is only enabled when your device is in debug mode, but your device dials home all the time and a single http header can enable debug for a period of time.