This would be very much illegal in Europe if used beyond just the test phase of an app. And even during testing it could only used with active consent of the tester probably.