Smartphone software most software these days only attempts to prevent unauthorized access to your information. It's up to the manufacturer to determine who is and isn't authorized. Calling that behavior malicious or not is moot point because they all do it.