How do I know that the device is really running your mobile app, not a copycat app and the real app is running on a device under the table or elsewhere? Seems like an easy thing to fake.