The startup is only a year old but it has already generated a massive amount of hype (and money) while also spurring privacy concerns.