An analysis of 1.8 million Android apps reveals that insecure code left over 700 TB of user data exposed, including API keys and financial details.