1) if it was a wallet stealer, i doubt google would approve it
2) you only put in your wallet address, the same thing most of you have in your signature, not your private key
3) your wallet should be encrypted anyway, so what's the problem?