> no need to actually run it, and it can't do any damage without being run
How sure about this are you?
Some common apps like Hangout and Facebook misuse iOS features to run in the background despite Background App Refresh is turned off, AFAIK.
How sure about this are you?
Some common apps like Hangout and Facebook misuse iOS features to run in the background despite Background App Refresh is turned off, AFAIK.
The only one I'm aware of is marking the app as a VoIP app, which means the system will keep it alive and let it occasionally check in with the mothership. But Apple heavily scrutinized apps marked as such to make sure they actually need it. And even then, I don't think they run until the user starts them at least once.
Even if the app could automatically run on download, it couldn't access any interesting information without being activated by the user and prompting to allow access to location, contacts, photos, etc.