Also how does the app stop the phone supplier from downloading an I/O Device driver "shim that effectivly puts a T-Piece in the pipe work thus copying the sensitive data on to some other hidden app or other hidden comms channel that is either real time or "store and forward such as the CarrierIQ software did with keypress and other data...