Popular mobile app makes purchases without the user's knowledge