У приложения WhatsApp прав достаточно, чтобы снифить сеть, перехватывать звонки и SMS, контролировать содержимое накопителя:Device & app history
retrieve running apps
Identity
find accounts on the device
add or remove accounts
read your own contact card
Contacts
find accounts on the device
> read your contacts
modify your contacts
Location
> approximate location (network-based)
> precise location (GPS and network-based)
SMS
> receive text messages (SMS)
send SMS messages
Phone
> read phone status and identity
Photos/Media/Files
> read the contents of your USB storage
modify or delete the contents of your USB storage
Storage
> read the contents of your USB storage
modify or delete the contents of your USB storage
Camera
> take pictures and videos
Microphone
> record audio
Wi-Fi connection information
view Wi-Fi connections
Device ID & call information
read phone status and identity
Other
read sync statistics
receive data from Internet
view network connections
create accounts and set passwords
pair with Bluetooth devices
send sticky broadcast
connect and disconnect from Wi-Fi
> full network access
change your audio settings
control Near Field Communication
read sync settings
run at startup
use accounts on the device
control vibration
prevent device from sleeping
toggle sync on and off
install shortcuts
uninstall shortcuts
read Google service configuration
> view network connections
create accounts and set passwords
pair with Bluetooth devices
send sticky broadcast
connect and disconnect from Wi-Fi
full network access
change your audio settings
control Near Field Communication
read sync settings
run at startup
use accounts on the device
control vibration
prevent device from sleeping
modify system settings
toggle sync on and off
install shortcuts
uninstall shortcuts
read Google service configuration
