Two file management apps on the Google Play Store have been discovered to be spyware that quietly sends user data to servers in China.