What it does: Have you ever downloaded a flashlight app from the Apple App Store and got a weird request for access your location? iTorcia is a popular flashlight app that Appthority calls "suspect."
What are the risks:
• Includes the device's Unique Device Identifier as a query string parameter in the URL that is sent unencrypted via HTTP.
• Accesses user's Location, Calendar and Contacts Book.
• Includes file paths to source code files in debug information, stored within the app's executable, which often include usernames and information related to the app developer.
• Incorporates Flurry Analytics framework, a service used to collect usage data, as well as Millennial Media, AdMob, DoubleClick and other analytics and ad network frameworks.