On top of background device data and analytics there is lot of sensetive user data shared on the app for which can be used to target certain audience. Social engineering this data and joining it with other apps(which can have security holes) is enough to hack the device and steal additional info. All this also applies to American companies like FB, Google etc however american companies don't have a parent like CCP who has access to all the data.