In such a scenario, do not worry. The UPI app authenticates your identity through mobile number. In case of theft, get your mobile number blocked through your service provider. In addition, PIN would be required both for logging into the application and authorizing transaction. So the possibility of security breach is minimized. As a practice, never disclose your PIN to anyone.