[codeonfire]

"There's no evidence that this crack pipe was used to consume crack cocaine"

The entire purpose of the application is ostensibly to send user activity to a corporation called Carrier IQ. I think the burden of proof is on the application whose purpose is to send user activity to Carrier IQ as to whether or not collected user activity including keystrokes is being sent to Carrier IQ. The fact that the software is able to gain keystroke events and SMS communications at all is a security breach.

I'm sure the problem of determining what confidential information is leaving the device is being worked on right now.