ok, #CoSoSec time.
Android phones were susceptible to an attack which allowed a malicious app to use the microphone, camera and if geo-tagging photos was on, your location even if you didn't give the app permissions to use the camera and mic.
Google has fixed this on their Pixel line, and Samsung has confirmed a fix. No word as to who else may have been or still is affected.