GO Keyboard is spying on millions of users according to researchers

Security researchers are warning Android owners that your keyboard may be spying on you. Researchers from Adguard say that two variants of Go Keyboard are sending personal information to remote servers and executing unauthorized code on devices. Go Keyboard is developed by the Chinese GOMO Dev Team.
The two versions of the keyboard are listed in the Google Play Store as “GO Keyboard – Emoji keyboard, Swipe input, GIFs” and “GO Keyboard – Emoticon keyboard, Free Theme, GIF“. The keyboards each have between 100k and 500k downloads, and are rated at 4.5 and 4.4 stars respectively.
Adguard decided to look into traffic associated with keyboards after the Touchpal keyboard was caught displaying ads on HTC phones earlier this year. Researchers determined that the GOMO team was collecting sensitive information including the email address associated with your Google Play Store account, network type, screen size, Android version, and build number. Additionally, the apps communicate with tracking networks and execute code from a remote server. Some of the downloaded plugins are marked as adware by multiple anti-virus programs.