Here are some examples of what can go wrong:
An Android app called FaceNiff enables an Android smartphone using a Wi-Fi network to detect any unsecured Facebook or Twitter login made on the same Wi-Fi network by a desktop or laptop using a standard Web browser. The app gives hackers access to a user's private contact details and those of all the user's friends. Using the app, hackers are able to collect personal information needed for identity theft.