[neptr]

Perhaps they'd like to determine whether or not a user is logging in from a new device, at which point another level of authentication may be appropriate.

[eggnet]

A hidden ID created randomly by the app on first launch, as suggested, seems to be sufficient for this case.