Sorry for this stupid question. A friend of mine reported:
His device had been jailbroken.
After he downloaded my game via TestFlight, he used a tool to get the ipa file.
Then he copied it to another jailbreak device.
Guess what? The game ran just fine on the other device which was not in my provisioning profile list.
Did I do something wrong?