Are there cases where Android would start an app/service other than due to Intents or explicit user start?
A raw native process can be created by any of the usual unix-like mechanisms.

An android activity or service is usually forked off by zygote (in response to an intent), but I think there's an obscure way to start a vm by hand using app_process.