My game does not look through your personal data. It does the exact same things that many other horror games have done in the past. All it does is displays your System name, and attempts to display an image from your desktop. It does nothing with the data other than, in essence, use them as game assets.
Also there is a disclaimer on the store page that states this.