Researchers in Denmark say that it's child's play to track your Android phone via Wi-Fi even if the Wi-Fi is nominally turned off - and even if you didn't let an app track your location. Apps distributed via Google Play have to enumerate the precise permissions they require in order to function - something simple like a flashlight doesn't require anything more than access to the camera, so that it can use the flash.