Next to the comments made by other users, it seems like the app just uploaded my address book without explicitly asking me. This was a really scary situation and resulted in an instant uninstall to hopefully stop it from uploading.
Not the way to handle this.