Addiuva Without Borders Security & Privacy Scorecard
Android
Crash reports and device data are sent to Sentry and Firebase. Calls and messages are routed through Zoom and Twilio infrastructure. Code quality concerns in this version could affect how reliably user data is protected during use.
Best for
Volunteers comfortable with third-party services
Avoid if
You share sensitive personal or health details
Findings
- 1 critical
- 4 high
- 6 medium
- 2 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- WebView Debugging Enabled in Production
- Client-Side Payment Verification
- Hardcoded Backend Infrastructure and API Keys Exposed
Top privacy issues
- Sentry Error Tracking with PII Collection Enabled
- Twilio Credentials Stored in Client-Side Storage
- Authentication Token Logged in Production
Full analysis
Addiuva Without Borders
Version: 1.4.2 | Scan Date: 2026-02-10
Security Score: 45/100 | Privacy Score: 55/100
What This Means for You
Crash reports and device data are sent to Sentry and Firebase. Calls and messages are routed through Zoom and Twilio infrastructure. Code quality concerns in this version could affect how reliably user data is protected during use.
Recommendation: Use With Caution
Best For: Volunteers comfortable with third-party services
Avoid If: You share sensitive personal or health details
Key Findings
Data Security - 4 findings (2 high, 2 medium)
Network Security - 1 finding (1 medium)
Code Safety - 0 findings
Privacy - 2 findings (1 high, 1 medium)
Privacy Concerns
What Data is Collected
Crash reports, device diagnostics, and usage data are collected through Sentry and Firebase Crashlytics. Location data is processed through Google Maps. Real-time communication data, including calls and messages, passes through Zoom and Twilio.
Third-Party Data Sharing
User data is shared with the following third-party services:
- Sentry - Error and crash reporting
- Firebase Cloud Messaging - Push notifications
- Firebase Crashlytics - Crash analytics
- Zoom Video SDK - Video and audio calls
- Socket.IO - Real-time messaging
- Google Maps - Location services
- Twilio - Voice and messaging infrastructure
Understanding the Scores
| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 55/100 |
| Data Security | 50/100 |
| Network Security | 88/100 |
| Code Safety | 42/100 |
| Data Collection | 60/100 |
| Data Sharing | 50/100 |
| User Control | 65/100 |
Positive Security Features
- No notable positive security practices were identified in this version of the app.
Areas for Improvement
- Data handling practices present multiple concerns. User information may not be adequately protected while stored or processed within the app.
- Code quality in this version needs improvement. These issues could affect the reliability of data protection during normal use.
- The range of third-party services receiving user data is broad. Clearer user-facing controls over what is shared would reduce exposure.
About This Analysis
This scorecard reflects automated static analysis of the app's code at the time of the scan. Scores may not reflect changes introduced in later versions.
App Details
- App Name: Addiuva Without Borders
- Package ID: com.addiuvasinfronteras
- Version: 1.4.2
- Scan Date: 2026-02-10
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 50/100 |