Lawmakers question what the app could be doing with users’ personal information and whether the app could pose a national security risk.