It's READ_PHONE_STATE that worries me, correct me if I'm wrong but isn't that phone meta-data? (Who is calling, when, etc?)