I think you're overreacting. Privacy policy disclosure is obviously in order, but that's about all there is to it.
A reasonable person would assume that if an application has no functionality that requires sending data over the network, the application won't surreptitiously spy on you and send your data over the network.