I don't think the average user knows that they are supposed to pass-up installing an app if it requests excessive permissions. I had to teach my friend to spec

I don't think the average user knows that they are supposed to pass-up installing an app if it requests excessive permissions. I had to teach my friend to specifically look at the permissions requested when installing apps. "This application requests permission to read phone state and identity." <-- That sounds so harmless to most people. If it said "This application requests permission to retrieve your phone number and your full name and send it over the internet to a 3rd party company", then they might be inclined to pass up installing the app.