Possible issues

Lack of emulator detection Lack of root detection Excessive permissions Sensitive Activities set as exported = true Improper use of content providers Hardcoded strings unprotected backup