App developers must take responsibility for the security of users’ data.