My policy is first one round of complaint to close the feedback loop and return the burden of hunting down the opt-out that should have been an -in.

Then, yes, the next step is just to remove the app and leave an appropriate review. A demonstrably adversarial app has no place in my life.