I installed Venmo Android app recently. Though I clicked "skip" when they asked me if I wanted to invite friends, they emailed my whole contact list anyway. I guess their rationale is that this email they sent out is a notification that I signed up, not an invitation from me.
My contact list includes my professional contacts. This is quite embarrassing.
I try to avoid mobile apps as much as possible for this reason, except when it is clear from the permissions dialog that they can't make me look like a fool. I still slipped up :-(
It would be great to have a blacklist of apps, especially the "popular" ones, that breach our trust.
Thoughts?