I think an important thing to consider is that word spreads through the development community pretty quickly and if they were caught red handed helping themselves to private data they risk a major backlash, most android enthusiasts take their phones more seriously than politics or religion. The letter seems legit and they are removing the questionable information gathered. To offend this community is a legitimate way to lose 60+ percent of the people who would use your services, free, ad supported or otherwise. There is only one company/entity who had constantly screwed with development and the xda crew and that's Verizon Wireless. Kingo is not Verizon Wireless.
I got more jelly beans than jelly belly, on my S3, S4, and Note 2. Where is my jellybeans ROM for my Note 3?