Hi all!
I've been thinking about this for a while, but always forgot to ask
others' opinion about this, till now. :-)
We do a great job in protecting privacy-sensitive resources such as
camera and location, which are available only after an explicit grant by
the user.
However, network access is automatically granted to all applications,
and the user is not notified of any online activity. That is, there is
no guarantee that a photo application wouldn't upload the photos it
takes to some third party service, or that one developer writes a clone
of the SensorStatus app which uploads all the data somewhere.