"Read Phone State and Identity" should be two separate permissions (code.google.com)