I do not have a current link because the software was acquired bty AT&T and intentionally does not have a public name any more, but all phones used to have Carr

I do not have a current link because the software was acquired bty AT&T and intentionally does not have a public name any more, but all phones used to have CarrierIQ. In debug mode, it could intercept any facet of code execution, network communication (pre-tls), log all finger movements, log phone movement and velocity. To put into debug mode, the phone just needs to receive a http header when it checks in for updates. It will log all the data, upload it and disable debug on a follow up header. The software can be installed over the air with no user interaction or notification. This was supposed to move to the firmware module to avoid users rooting the phone and removing it, but I honestly have no idea if or how that progressed.