Low-cost Android phones collected calls, texts without permission

Personal data from phones, including several models from Blu, was being sent to third-party servers without disclosure or the users' consent, says security firm Kryptowire.