I accidently clicked on an advertisement, and opened it with chrome. It was one of those things where you can subscribe to an App Store for £4.50 a week for apps which are usually free anyway.
This is the app screen (left) with app permissions (right):
App screen shows the last six digits of my mobile number at the bottom.
And this was the URL:
How can I fix this security problem?