Native bacteria? Ooookay.

Yes, but not effectively. You can only interact with the WebKit JavaScript system by passing strings into your hidden UIWebView component. And the JS could only "call out" to the host environment by requesting custom URLs that the host environment could recognize (e.g. custom://show-alert/?message=foo+bar). As a consequence, if you want to do anything requiring back and forth between the two environments, you have to do it asynchronously. It's a real pain.

People who write parenthetical "hints" are toolboxes. Don't be one of them.

You're thinking of asbestos, maybe...

You're not selling a company. You're selling a product, and an unproven one at that. No one is going to buy this from you, because even figuring out how much it's worth would be a costly endeavor. And what are they going to get for your "company?" A zip file full of source code?

You can't possibly tell that from the screen shots. The form itself is not on an SSL-protected page, but that's not uncommon. What's important is whether it *submits* to an SSL-protected URL, and I'd be kind of surprised if they didn't do that.