Apps
9 app pages, the newest scanned on 29 July 2026. Each page covers one build: its score, its label and the file behind every finding.
- 92out of 100TRUSTED
What it means for you
Health and workout metrics stay on the device and are not sent to any third-party service. The app includes code to send app usage and session data to Mixpanel for analytics and to Adjust for attribution. Advertising identifier access requires explicit user consent before it can be activated.
- 89out of 100TRUSTED
What it means for you
The app may include code to pass standard usage and device data to the app developer and integrated services. The breakdown below lists the data types and third parties involved.
- 4 findings
- Data Security 1
- Code Security 3
- 95out of 100TRUSTED
What it means for you
The build may include code to pass usage data and device activity to the app developer and any integrated services. Review the category summary below for details.
- 3 findings
- Data Security 1
- Code Security 2
- 96out of 100TRUSTED
Google Authenticator
AndroidWhat it means for you
The build may include code to pass usage data and device activity to the app developer and any integrated services. Review the category summary below for details.
- 3 findings
- Code Security 2
- Privacy 1
- 98out of 100TRUSTED
Wikipedia
iOSWhat it means for you
App usage is tracked only by Wikipedia's own first-party analytics, with consent collected at onboarding. Donation payments are processed through Adyen and Apple Pay. The build includes no code to send user data to advertising networks, behavioral tracking companies, or third-party analytics services.
- 1 finding
- Code Security 1
- 98out of 100TRUSTED
What it means for you
Signal stores messages, voice and video calls, and contact data on-device. The build includes no code to send user data to analytics, advertising, attribution, or crash-reporting services. Third-party libraries are limited to UI components (SDWebImage, Lottie, BonMot) and data utilities (SwiftProtobuf, GRDB, libPhoneNumber_iOS). MobileCoin handles optional peer-to-peer payments.
- 3 findings
- Data Security 1
- Network Security 1
- Permission Usage 1
- 99out of 100TRUSTED
What it means for you
All gameplay activity remains on the device. No data is transmitted over the network, and no user information is retained after a session ends. UIDevice access is limited to detecting screen orientation for layout purposes.
- 1 finding
- Privacy 1
- 94out of 100TRUSTED
What it means for you
Ente Auth stores two-factor authentication secrets locally with strong encryption, excluded from iCloud backups by default. The app includes code to send crash reports to Sentry, with code that strips authentication tokens and cookies from them first. The build includes no code to send user data to advertising, analytics, or attribution services.
- 0 findings
- 95out of 100TRUSTED
Proton Drive: Cloud Storage
AndroidWhat it means for you
File content, names, sizes, and metadata are end-to-end encrypted, meaning Proton cannot read stored files. The app includes code to send crash diagnostics to Sentry using a random identifier that cannot be linked to a Proton account. The build includes no code to send data from normal use to advertising, analytics, or attribution companies.
- 3 findings
- Data Security 1
- Network Security 1
- Code Security 1
