Files found on third-party sites can be infected with malware designed to steal personal data, spy on user activity, or lock the device (ransomware).
This indicates a "vault" app . These apps are marketed to hide private photos behind a fake interface, in this case, a contacts list or telephone directory.
Downloading and installing unofficial .ipa files is dangerous for several reasons: