Smartwatch tracker for the vulnerable can be hacked to send medication alerts

API issues could be exploited to make calls, spy on users, send fake messages, and more.