&gt; write an app that does that<p>Here&#x27;s a sample of how to invoke `Activity.savedDialogKeyFor`, which is private:<p><pre><code>    Method privateMethod =
        Activity.class.getDeclaredMethod(&quot;savedDialogKeyFor&quot;, int.class);
    privateMethod.setAccessible(true);
    String result = (String)privateMethod.invoke(this, 42);
    System.out.println(&quot;Got result: &quot; + result);
</code></pre>
Worked perfectly on Android Marshmallow emulator. As I said, it&#x27;s trivial.<p>&gt; Also - I&#x27;ll leave this here<p>What&#x27;s your point? There was no security exploit here, and no security policy can realistically prevent networked apps from sharing data like your email address. That falls to the review process.<p>What&#x27;s remarkable here is how little data this malware was actually able to capture. Certainly less than on Android, where users routinely grant excessive permissions, like giving Netflix access to your phone.