HTC phone fingerprint readers store the fingerprint image in files that any malicious app can get at.

Spying is normal practice for nonfree apps.