Does Starbucks' mobile app do enough to protect user information?