Those are both hypothetical that are very far from typical ways that people use apps on their phones.<p>An app might upload the image to a remote server.  A website might parse it locally through JS - maybe disabling your connection, submitting your image, parsing it, then wiping your cached website data would be just as &quot;safe&quot;.<p>The problem is the knee-jerk reaction that &quot;some random website&quot; is dangerous while some random app is not.  You have to assume both are equally risky in this situation.