This just in: https://www.blockfolio.com/june_30_privacy_statement.html

cliffs: They aren't snooping on portfolio data, just providing normal app update services. An insecure Android process was updated to HTTPS to make this even more secure.

Why I believe them: I've spent years developing mobile apps; the issue & their explanation is totally normal/standard.