Potentially even worse, Google had an excellent per application permissions system they were working on in Android 4.2 & 4.3 called App Ops that worked similarly to iOS, but that project appears to have now been cancelled: http://techcrunch.com/2013/07/26/android-app-ops/