The app contains multiple features that have sounded alarm bells in this security researcher's analysis.