Don’t let an app ask for your identity with Touch ID or Face ID unless you know what it’s doing. A pair of fitness applications were found to be tricking users into authorizing financial transactions.