access ActiveSync addressbook

Hi,

I am having a question to Content which is synchronized to the iDevice via ActiveSync.

I am fully aware that an App with appropriate access can access all info from a 'local' addressbook, but I read many times that ActiveSync works different...

So, what Information could an App obtain from an address book synchronized via ActiveSync if it gets access to it via data privacy settings?

Moreover ActiveSync offers a search functionality where its possible to search the entire Exchange directory for contacts that are not yet in the local exchange address book. Could an App “miss use” this search to for instance grab all contacts within a company?

Thanks a lot in advance!