Yes, you should purchase a certificate otherwise people may not want to trust your app and some policies wont allow it to be installed.

Check Verisign as they are the major forerunner in certs and there are a few others that are cheaper. There was a thread on the forums recently posting a link to a site where it was less then $100.