The interesting thing about the @path address book debacle: Android makes it explicitly clear what an app has access to. Not so much on iOS.