Apps hiding malicious functions collect data – including location, audio and camera – which could facilitate surveillance and harassment.