You may recall that a month ago, I told you about a free third-party contact syncing app for Android. TouchDown, which costs $30, is a little more involved:

• It works with Microsoft Exchange Server 2007 SP1 and "most" online Exchange hosts.
• You can compose, send, reply, reply-all, forward and delete emails.
• You can add, delete or edit contacts from the phone, updated two-way to your Exchange account.
• It doesn't require an app running on your computer to serve the stuff to the phone.

Here are some screens: We're probably not going to test the app straight away, but if you happen to give it a run, please comment here for the benefit of others. [Press Release; TouchDown Product Page]

To be clear, this isn't full Exchange syncing, it's just a way to dump Exchange contacts to your G1 phone. Every time you sync, whatever changes made to your contacts on your server get sent to the phone. It's not yet two-way—so no using your phone to update your server-based contacts—but the developer says it'll add that functionality soon.

I asked Wrike's Valerie Sinitskaya about calendar and email and she told me that calendar syncing was dependent on Android's API—it's not yet available. As for email, she says, "Users can access their email from Exchange using IMAP, so we don't have plans to sync email." Fair enough, though I do still fear for Android, business-wise, if all we get is a piecemeal network of apps, each doing a part of what a mobile Outlook could do. [Wrike]

Let's start with the obvious: No Exchange server means no corporate push email. This didn't catch us off guard, as there were rumors that the G1 would launch without it. However, we were surprised by the sheepish looks on the Google executives' faces when reporters pressed the matter. "We expect this to be solved by third-party developers," was all that they said. Yes, it is true that some very nice mobile email management has come from third parties such as Good (now owned by Motorola). But the fact that the Android team isn't spearheading the integration of push email means it doesn't think of enterprise apps as a priority.

Jump from there to the lack of desktop syncing. I am with all the people who like the fact that mail and calendar data syncs over the air (for "free")—it is a great consumer service. But if you can't connect to an exchange server and desktop ActiveSync to Outlook is out of the question too, well, that means hordes of suit-wearers will simply have to say "no" to this device.

As if that wasn't enough of an ix-nay for IT buyers, Android's security issues are pretty significant. Because of the open-source nature of the OS, programmers have access to core functionality they wouldn't be able to access when dealing with platforms such as BlackBerry, Windows Mobile or the iPhone's OS X. True, like Windows Vista, the system is designed to ask you to grant new applications permission for each and every capability that an app desires, as you can see above. But it's easy to say yes to things you wouldn't necessarily understand. Is it bad that an app I don't know well can "modify global animation speed"? Honestly, I don't know.

Update: What we meant was open, not open source, as in more freely accessing parts of the hardware that apps don't necessarily need to access. An example would be a rogue flashlight app that you happened to grant permission to access your microphone, and it theoretically records your conversation with your coworkers.

More importantly, apps with that kind of access can easily muck up the rest of the system, like so much crapware on a new PC. An app full of weird conflicts doesn't have to be malicious to be disastrous. The Android Market is a place to get Android apps, but Android apps will be available from any source, and you'll be able to install them directly. It's good news for tinkerers who know what they're doing, and it does support the free-market approach for distributing software, but it could easily lead to brickage of company property.

IT pros look for certain security features too, such as the ability to remotely wipe a lost or stolen phone's memory, or to establish a virtual private network. Trusting third party apps for this isn't a problem on paper, though shopping for, vetting and deploying competing applications as they're developed could easily create as many problems as they're supposed to solve.

The trouble with leaving core features to third-party developers is that it often leads to nasty blame games. Microsoft has gotten in the most trouble in the past when it launched software platforms—a good example would be the PlaysForSure music DRM—then refused to take responsibility when third-party developers failed to implement it successfully for users. It's a built-in cop-out, and that may work for daring nerds with extra cash and a disdain for status-quo devices, but it doesn't work for mass-market consumers, and it certainly doesn't work for the most skittish buyers of all, corporate IT dudes. Sorry Google—I for one would like to see a little more stewardship, and an acknowledgment that if Apple can implement Exchange, VPN and other corporate goodies, well, you got no excuse.