There is an approval process for the Shopify app store. So all apps get verified by a member of the Shopify team.
If an application were to slip through the cracks, we have the ability to revoke all access and uninstall the application from every one of our merchants.
Depending on the functionality that the app is offering it sounds like it's not doing anything crazy. Applications that only read aren't that useful, aside from providing analytics.