Which is the reason alongside telemetry I tend to favor using websites over apps.
Having said that there are apps that are considered mainstream and not malicious by the general population but can become a convenient backdoor for, say, a state actor.