Unlike PCs/Laptops, mobile devices are considered to be personal and secured access.
Hence all the shopping apps (like flipkart, amazon, BigBasket etc..) are always logged in.
Many of these apps have "wallet" option.
If the mobile is lost/stolen, these wallets are at disposal of the thief.
Hence these apps should prompt for password if a new delivery address is added (or) a new service is requested (say recharging a new mobile number) ...
Also, these APPs should eMail the newly added delivery address, or newly added mobile number details to the registered eMail id. so the mobile owner can track the thief.