This is something that I've found troubling as well. Every time a transaction is made via PayPal (even through the website) the app wakes up an attempts to acces the camera. It's not a bug - this kind of funcitonality can't come about by accident. PayPal's core service has to send a push notification out to any devices associated with the account when a payment is made, the app has to understand the notification and respond appropriately by accessing the camera, taking a picture, and (presumably, I haven't profiled it myself) sending it back to PayPal. This is very much an intended feature, albeit a pretty creepy one. At least Android users with Kit-Kat or later have the opportunity to block access using Privacy Guard. One presumes the same feature is built into the iOS app and iPhone users have no defense.
... View more