Comment by kornhole

It is not speculation. I assume every app is hostile and trying to grab information until it can be proved that it does not. Until the app is open sourced and/or people do network analysis on it, this is the safest default assumption.