The official app's no-log policy is managed by its legitimate developers. A modded version could bypass this to send your data to a third-party server.

: Obtain the modded file from a reputable community source like Uptodown or Aptoide .

Many users make the mistake of logging into the "Mod" with their real Google or social media accounts. Since the mod is uncontrolled, the developer can capture the login token. This leads to: