Government spies on people through mobile apps? There's blame to go around but the buck stops at the app developers. They might point the finger at the third-party ad providers (who were directly responsible for leaking the data) but they themselves were the ones to integrate with those shoddy/shady ad tech companies.
