Apps can be distributed outside of the app store, but you need to know specific device information. Not very difficult though if you have physical access to the phone.