README lacks specification of behavior
(I am not accusing you of doing anything wrong, and the README does indicate by omission that things are ok.)
I would like to see the README say:
- no data is transmitted from the user's phone, and specifically not call data and not contacts
- the only network usage is that the FTC database is downloaded, when the user explicitly asks for that
- (or if there is a bit more, be clear about it)
I am 99.99% sure this is how things are, but I think it's best to declare it explicitly so that users can know what is promised and anyone can audit code vs specification.