They specifically mentioned the top 10 flashlight apps in the Google Play Store. It's about Android. WP is not Android
Apps on WP have access to almost none of the data mentioned
These forums have many posts from users asking about malware and anti-virus software for WP. This is completely unnecessary, but those threads are still a good source of information should you want to read more about why this doesn't apply to WP. For example here.
The person making these claims is the CEO of SnoopWall. He specifically mentions "privacy flashlight" as a safe alternative, but doesn't mention that he's the developer of that app. That has a bad smell to it, as it gives him a lot of incentives to exaggerate the threat. I don't know enough about the issue to call BS, but I'm highly sceptical of it.