martphone maker Xiaomi was caught up in a related problem in 2014 after a private security firm discovered it had been collecting information from users' address books without permission and storing it on remote servers.