Open-source the application, and have people check the checksums of the .IPAs and .APKs if they want to verify. A simple GUI wrapper for email wouldn't be particularly complicated implementation-wise, so it wouldn't take a security analyst to vet, either.