Kate is a citizen. She is 60 years old and the family lives away. She gets visited daily by a care worker. Kate downloads the app and enters her data. Kate shares her data with the care worker so it can be managed for things like appointments and medication. The manager of the care worker sees the app, checks that the site has no policy whatsoever. Shares the name of the app with the law department. Law department contacts the local health authority regarding the app legality. The local health authority begins proceedings against the developer. Developer loses money

That makes sense, and I hope it would work. Still, that's maybe an old view of how software and business work. In truth the app is a whipped-together thing, and the 'company' selling it is a shell. The address is a blind PO box.

Law department visits the box and finds nobody. Shell company changes name (indeed, perhaps they have a different name for every victim) and resume operation immediately. Hell, they never stop selling for a millisecond.

Follow the money? Ha. The modern ideas of currency make such schemes bulletproof.

Yeah but how does the "law department" gain money? The question I asked is "what's in it for them?"