>But once users logged into the innocent looking apps via a social network OAuth provider, Banjo saved the login credentials, according to two former employees

>But once users logged into the innocent looking apps via a social network OAuth provider, Banjo saved the login credentials, according to two former employees and an expert analysis of the apps performed by Kasra Rahjerdi, who has been an Android developer since the original Android project was launched. Banjo then scraped social media content, those two former employees added. // CMA (UK)/CFAA (USA) both make unauthorised access a crime, so, yes there are laws against this.