People should be very careful with installing things in their homes that connect to WiFi or integrate with an app on their phones.
Once the thing is communicating on a network, especially over the public internet, you have no idea whether that connection is secure (encrypted) or if it is easily intercepted with common network sniffing tools.
Some of these device manufacturers are not hiring good network engineers and know little to nothing about encrypting communications — or worse, they know how to do it but choose not to. Some are known to use unencrypted connections (HTTP instead of HTTPS) and simple passwords that are easily guessed.