How a photo editor app from Google Play secretly signed up users for unwanted paid services.