I have downloaded an app to record all my calls. The app is working great but the trouble is that it doesn't shows up under the "Ongoing" in the notification bar nor does it shows up in "active applications" in the task manager also they do not require root access to run. I have tried many different apps that does the same thing. I have a rooted Samsung Galaxy Y phone running android 2.3.
What bothers me is the thought - "It's possible that the chess playing app(say) that I have in my phone, also records my calls and send it to remote servers - without my knowledge"
There is a posibility of giant security and privacy compramise here.
My question is: 1. Are there any similar loopholes that can be dangerous? 2. What should I do as an android user? 3. What has Google done/planning to do to prevent such apps in Google Play?