This article in The Independent reports the use of these fake mobile phone towers. The authorities are neither confirming or denying their use , but it appears that there is no form of oversight or regulation in place .
In posts 17 and 19 of this thread, there's links to equipment and an application that can detect Stingrays. These devices must have a capacity limit. What we need is the cellphone equivalent of the LOIC that can specifically target these devices when they're detected. It would also make for some interesting legal questions along the way. How could they charge you with interfering with devices that they claim they're not using?
I just cannot bring myself to using my Android for "secure" things. Sure, I want privacy but I don't expect to have it when I am on my phone. That sucks by the way!!
Stingray is only effective for traditional calls and texts. If you were using a secure app for calls or texts, you'd be fine.