[yorak]

Also, I recently found out that Android app from Linkedin extracts your gmail contacts. From what I could gather, you cannot opt-out. I was quite annoyed by this. I also see this a more probable explanation to contact harvesting than hacking to email accounts.

[tedunangst]

Do you know this because installing the app requested permission? The android security model is all or nothing, up front. If anyone ever would want the app to access their contacts, the app is required to demand that permission from every user at installation.