[teej]

Surprise! Apple doesn't give a shit that this is happening. If they didn't want developers to have the data, they wouldn't have made the API public. Apple even touts this as a feature in their public-facing developer site!

Quote from https://developer.apple.com/technologies/ios/data-management...

"iOS apps even have access to a device’s global data such as contacts in the Address Book, and photos in the Photo Library"

This is in no way a failure of the App Review process. This is a failure in the way Apple expects user data to be treated. Lots of developers do this. The only way to stop this is a change in Apple policy, end of story.

[mihaifm]

This seems like a serious policy 'bug' indeed. The app developers have their part of the fault, but if someone just gives you free stuff, why not just take it.