Google's permission model is fundamentally flawed. Google in it's insanity has required an "all or nothing" approach to permissions. Because of this, the vast

Google's permission model is fundamentally flawed. Google in it's insanity has required an "all or nothing" approach to permissions. Because of this, the vast majority of all users must accept all permission requests up front, and developers are highly motivated to ask for more than they need up front to prevent asking for more later. The far, far superior model for permissions is for basic permissions to be granted at install, and each new permission to be requested at run time. But, how can the majority* of your apps download personal information, hijack your contact list, and spy on your location if you have to explicitly give them the permission to do so when they begin the function... * I'm being hyperbolic, but we have very few ways of actually knowing how many apps abuse their permissions. Generally, one or two popular ones get "called out" for doing what everyone is doing, and everyone descends back into feigned ignorance at permission abuse.