With respect to MediaTek's "Common Data Service" I worry about it. Reviewing what rights it has in... [Menu button -> Manage Applications -> Common Data Service] shows that it has all rights, basically.
And I've just setup the ADB (Android Debug Bridge), connected my phone to my computer and ran the following command from a prompt:
adb shell am start -a android.intent.action.MAIN -n com.mediatek.connectivity/com.mediatek.connectivity.CdsInfoActivity
...and it brings up the app on my phone. It's a menu with the following entries:
- CDS Information
- Wi-Fi Information
- Radio Information
- Network Utility
- Multiple APN
- Connectivity Testing
- MTU Configuration
- Socket Information
- PS data control
There's a wealth of information going on here. The "Network Utility" appears to be able to get/set a variety of attributes to include running local shell commands the user enters.
It kind of looks like a backdoor.
The bad thing about this is that you can't launch it normally using the various methods given to a user. The Launch button is grayed out in the interface under Manage Applications, for example. So if this isn't a tool for users then this must be for MediaTek themselves who made the processor.
Weighing in here only against "Common Data Service" I would say that if it's trying to reach out to the Internet then that's a bad thing. DENY.
As for "MTK Thermal" they're probably trying to send themselves temperature data, in theory, about the products in the field (or so we could hope). OUCH... look at the list of rights this program has. Again, DENY.
Same goes for com.mediatek. DENY.
Unknown UNICODE string of Mandarin. DENY.
Things like Key Chain are worrisome in that you have to go fetch the public key in this sort of cryptography. But then again, what's to prevent them from uploading your credentials to some server out there? Hard to suggest in this case.