While I always hesitate to say we need legislation, but in this case I think we do. We need to make secret collecting of data from private phones absolutely illegal and subject to criminal prosecution as well as civil litigation. If any data no matter for what purpose was taken off of my phone without my consent I should be able to sue their asses off then have the DA hit them with criminal charges. In the day of the old land lines if some company figured out a way to monitor your phone without your knowledge they would have been thrown in the slammer so fast they would not know what hit them. How is this any different other than it's clearly worse as they are deliberately collecting secure information.
THAT'll fix the problem!!