AAWireless for Android Auto™ Security & Privacy Scorecard
Android
In-app activity is tracked by Firebase Analytics, and Google AdMob delivers targeted ads. Crash reports and device performance data are sent to Google and Splunk. If support is contacted, the conversation goes through ChannelIO, a third-party service.
Best for
Android Auto users comfortable with ad-supported apps
Avoid if
Users who prefer ad-free utility apps
Findings
- 0 critical
- 4 high
- 8 medium
- 4 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Firebase Authentication Tokens Stored in Plain SharedPreferences
- Deprecated Splunk MINT SDK (Security Updates Unavailable)
- Cleartext HTTP to Local Adapter Without IP Validation
Top privacy issues
- MAC Address Sent to Firebase Analytics
- Analytics Initialized Before Consent Collection
- ChannelIO SDK Sends MAC Address to Third-Party
Full analysis
AAWireless for Android Auto™
Developer: (not listed)
Version: 6.19.2427
Platform: Android
Scan Date: March 5, 2026
What This Means for You
In-app activity is tracked by Firebase Analytics, and Google AdMob delivers targeted ads. Crash reports and device performance data are sent to Google and Splunk. If support is contacted, the conversation goes through ChannelIO, a third-party service.
Recommendation: Acceptable
Best For: Android Auto users comfortable with ad-supported apps
Avoid If: Users who prefer ad-free utility apps
Key Findings
Data Security - 6 findings (1 high, 3 medium, 1 low, 1 info)
Network Security - 1 finding (1 medium)
Code Safety - 0 findings
Privacy - 5 findings (2 high, 3 medium)
Privacy Concerns
What Data is Collected
This app gathers device information, crash reports, performance metrics, and usage patterns through multiple integrated services. Google AdMob uses user activity to deliver targeted ads.
Third-Party Data Sharing
User data is shared with the following services:
- Google (via Firebase Analytics, Crashlytics, AdMob, Cloud Messaging, Remote Config, Storage, and Google Sign-In) - receives activity data, crash reports, and device information
- Splunk MINT - receives crash and performance data from the device
- ChannelIO - handles customer support conversations when the developer is contacted
Understanding the Scores
| Category | Score |
|---|---|
| Security | 85/100 |
| Privacy | 78/100 |
| Data Security | 90/100 |
| Network Security | 98/100 |
| Code Safety | 96/100 |
| Data Collection | 78/100 |
| Data Sharing | 95/100 |
| User Control | 78/100 |
Positive Security Features
No standout security practices were identified for this app version.
Areas for Improvement
- Targeted advertising through Google AdMob means user usage patterns are used to build an advertising profile.
- Device performance and crash data flows to both Google and Splunk, giving two separate companies access to device behavior.
- Customer support messages are handled by ChannelIO rather than the developer directly, adding another party with access to support history.
About This Analysis
This scorecard reflects automated static analysis of the app binary and code at the version listed below. Scores represent observable behaviors and data practices identified at that version.
App Details
| Field | Value |
|---|---|
| App Name | AAWireless for Android Auto™ |
| Package ID | app.aawireless |
| Version | 6.19.2427 |
| Scan Date | March 5, 2026 |
| Developer | (not listed) |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 82/100 |