It seems like this type of app could very easily do everything locally without connecting to a server at all and it’s pretty insane that they instead choose the tradeoff of the obvious privacy nightmare and misuse of sensitive data for whatever small advantages like being able to sync between different devices or whatever.