Is this because application developers are simply going where the people are? Or is there better data harvesting to be had on your average iOS/Android app with blindly accepted permissions than there is in the average desktop browser.