This is a direct breach of privacy. We don’t know what this app collects and does with it. As long as this malware can be uninstalled, it’d be fine.