Official Chinese app 'allows spying via back door'