Notice how there is actually no proof at all in these tweets. The author admits that they could not observe any network requests being made: > I didn't manage

Notice how there is actually no proof at all in these tweets. The author admits that they could not observe any network requests being made: > I didn't manage to trigger the network communications to the teddymobile servers but I will continue later. It looks to me like this person is cherrypicking random SDK methods that may seem suspicious out of context and making very wild assumptions of their purposes. For example, they show a function that checks if a string contains a bank account number (https://twitter.com/fs0c131y/status/956649951056064513 https://twitter.com/fs0c131y/status/956649951056064513). Somehow they then jump to the conclusion that copied text is run through this function and uploaded to some server! But where is the proof? They could check where this method is used and show this supposed data upload happening. In fact, since these methods are coming from some third party SDK and not the app itself, they could be completely unused.