Some apps require a lot of permissions and can be used for malicious purposes - usually apps that are in the Play Store or Apple App Store are fairly safe - it's when you start side-loading apps onto your device from unknown sources is where you can possibly get into trouble unless you know the source of the app is valid. This is why Android disables sideloading by default - but can be turned on under Settings -> Security -> check 'Allow unknown sources'.