It seems like some of these features were loading images directly from the client. So presumably this could have been used to get info like your browser and IP

It seems like some of these features were loading images directly from the client. So presumably this could have been used to get info like your browser and IP as your phone made the request to the server that they provided. The recommended work around to to just send the link which now makes it explicit to the user that they are connecting to the third party.