I got ripped off by the McDonald's App too -- charges in different provinces no less. Zero security. Use the app but don't give them any information, including credit card. I would like to think that McDonald's isn't skimming peoples credit cards, but who knows these days.
How can we fly like eagles, when we're governed by Turkeys?