In that case, I'd still have to either audit the app's code or trust the author. With mobile Web, I know it won't spy on me like that because the browser won't let it.