Comment by dancsi

As for the last point, you are right, they are purposefully sending encrypted/encoded(?) data to your phone, which is then sent to their server. The raw spectrum will only be returned from the server if you have an even more expensive "researcher" account...