Mobile app security can be a big deal. I remember a few years ago the app for British Airways would make a non-encrypted call to BA servers to get the SSIDs and passwords for the WIFi access points of their airport lounges. While trivial in comparison to other security leaks it goes to show that small but important things can easily be overlooked.