Android App Sells Your WhatsApp Conversations: The actual app to watch out for is called BalloonPop2. F-Secure and others report that it was available in Google Play for a time, but has since been removed. Its currently available from the developers website.Once installed, the game actually works—though it is a dull, stripped-down affair. But F-Secure explained that behind the scenes, the app is figuring out the details of your WhatsApp account. It also checks your SIM cards serial number, presumably to match your WhatsApp account to a phone number. The app then copies the contents of two directors associated with WhatsApp: the entire contents of your Profile Pictures folder, and then files ending with “.db.crypt” contained in WhatsApp/Databases/.