This is exactly why I don't download apps. I proxied my phone one day and almost fell out of my chair. I'm shocked Google and Apple allow this to go on.
Android Nougat is much worse in this regard: Apps disrespect any user-added CAs, which really doesn't contribute to Android's security level but makes checking what your apps send home a huge PITA.