If I read it correctly, the mobile app first connects to the store page on http, which then gets redirected to the https version by their server. So probably a

If I read it correctly, the mobile app first connects to the store page on http, which then gets redirected to the https version by their server. So probably a typo / misconfiguration in the app. The store itself uses https everywhere. If you intercept the first request you can display whatever you want to the user tho.