Comment by TedDoesntTalk

All it's doing is POSTing the contents of /private/var/mobile/Library/SMS/sms.db to a server. You can't get an app into the app store that haz the required permissions to access that file.

Solution: Dont install apps outside the app store.