Apps from unknown sources can request permissions to read SMS, contacts, and location data without oversight. Recommendation
The package name format suggests a generated or obfuscated ID often associated with:
(ch.convadis.carsharing): A vehicle access tool for fleet management Google Play .

