From what I've previously read, they are simply turning off the collection of information. That means CIQ is still going to be installed on all those devices and from the sounds of things there will not be a fix to remove it.
Its the power of the software on the phone itself that concerns people... not that sprint wants to know how goodd my signal is.
If someone figured out how to gain control of the programs and use it for malicious intent and its still installed on all those devices it wont matter that Sprint isnt collecting data anymore.