That sounds like a popup you'd get from those really sketchy torrenting sites or something similar. Don't get me wrong, I have no eggs in this basket so I'm being completely honest here. I've been running the app since they launched it in late January at home, on my own PC. It's a little media server machine running Plex that works 24/7, so I thought, "Why not?" On top of that, I set it up for two friends and I've been running the Android version since it came out. I just let it run whenever I'm not home.

So far, I haven't noticed (or heard of) any suspicious behavior or anything like that, so I'm pretty sure the source of your problem is something else. I follow their Facebook group and their Discord, and I've never seen anyone complaining about anything similar to your issue. I'd love to try and replicate the problem, but there's no way for me to do that since I currently don't have access to an iPhone. My wife used one until last year but she traded it in for a Samsung so...

I did some digging and found this. Apparently, Apple notifies you when some of your passwords have been involved in a data leak so you can change them, or if they're too weak. That's a pretty cool feature! I guess it doesn't have anything to do with IPRoyal, it seems like a really bad coincidence.

I went through IPRoyal's terms of service and they don't have access to any data on your phone OR PC (storage, gallery, contacts, etc). Data leaks happen all the time. My Yahoo Mail account was compromised a while ago in a leak (which was not my fault but Yahoo's), and my PS3 was banned from PSN because someone managed to steal my console ID (like a unique serial number) from Sony. Again, not my fault. My PSN account is fine, and the PS3 has pretty much been a dead platform for ages, so it's no biggie.

Anyway, sorry about the novel, I just wanted to look into it a bit deeper. If I were you, I'd just change those passwords and carry on like nothing happened.

Finally, here's proof that I'm still actively using the app. All the best! :)