In Android, it's super simple for an ads framework or a malicious framework - installed as part of some useful app - to run a background service and keep record

In Android, it's super simple for an ads framework or a malicious framework - installed as part of some useful app - to run a background service and keep recording microphone and phone calls. It is possible to hack the Android platform or OS to prevent or mitigate mischief like that, but ironically, it requires devices to be rooted. Android architecture rewards the bad guys by obstructing the good guys! I think mass migration of all devices to something like Cyanogenmod is the only solution.