Hacker News Reader

It is advertising supported, so the requirement for internet access is plausible - even though it was misused.

But your contact book and location?

Obviously unjustified and a clear warning sign.