‘Secure’ Chat App Spies on Users