I don't see why everybody has a problem with security on Android. Like others have said, a dialog shows everything an app needs permission to do. Beyond that, install Droid Wall. It lets you approve or deny access to the Internet for each app (it's an iptables front end). You can also set it to block by default as I have, so that new apps never get the chance to connect until you allow them to. It requires root, but it's worth it. Don't forget to install a superuser whitelist program too so that you must approve any apps that want root.