Phones and permissions

There's not that much point in spoofing the IMEI anyway: it only identifies the phone hardware. Spoofing the IMSI (the SIM identifier) which is linked to the subscripter seems a lot more interesting. The phone number (MSISDN) is not always available on the phone (only from the HLR using the IMSI), but it could be a good idea not to return it at all even if it is.