No, but let's pretend a master password app silently sends the password info back home periodically. Apple's process would let an app like that through. It'd be

No, but let's pretend a master password app silently sends the password info back home periodically. Apple's process would let an app like that through. It'd be pretty stupid for a developer to do this (I even think it's stupid for an Android dev to do this), as they'd certainly get caught. But Apple's submission process wouldn't be what caught them.