CITT

    Scan results

    Addiuva Without Borders

    Android

    With this application you can easily and quickly request assistance from anywhere. A productivity tool developed by Addiuva Enterprises for emergency roadside and personal assistance services.

    CITT SCORE
    50
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Volunteers comfortable with third-party services

    Not For: You share sensitive personal or health details

    What It Means For You

    Crash reports and device data are sent to Sentry and Firebase. Calls and messages are routed through Zoom and Twilio infrastructure. Code quality concerns in this version could affect how reliably user data is protected during use.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (12)

    Data Security

    4 total
    2 High
    2 Medium

    Network Security

    1 total
    1 Medium

    Code Security

    4 total
    1 Critical
    1 High
    1 Medium
    1 Low

    Privacy

    2 total
    1 High
    1 Medium

    Third-Party Risk

    1 total
    1 Low

    Third-Party Services

    Sentry, Firebase Cloud Messaging, Firebase Crashlytics, Zoom Video SDK, Socket.IO, Google Maps, Twilio

    Security Strengths

    • ✓EncryptedSharedPreferences with AES256-GCM encryption
    • ✓No SQL database eliminates SQL injection risk
    • ✓No JavaScript interfaces in WebView prevents RCE vectors
    • ✓WebView file access protections enabled
    • ✓Android backup disabled
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    location
    sensitive data
    camera
    contacts

    Package

    com.addiuva_sin_fronteras

    Version

    1.4.2

    Analysis Date

    Feb 10, 2026

    Classes Analyzed

    40

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (2 high, 2 medium)

    Network Security - 1 finding (1 medium)

    Code Safety - 0 findings

    Privacy - 2 findings (1 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    Crash reports, device diagnostics, and usage data are collected through Sentry and Firebase Crashlytics. Location data is processed through Google Maps. Real-time communication data, including calls and messages, passes through Zoom and Twilio.

    Third-Party Data Sharing

    User data is shared with the following third-party services:

    • Sentry - Error and crash reporting
    • Firebase Cloud Messaging - Push notifications
    • Firebase Crashlytics - Crash analytics
    • Zoom Video SDK - Video and audio calls
    • Socket.IO - Real-time messaging
    • Google Maps - Location services
    • Twilio - Voice and messaging infrastructure

    Understanding the Scores

    CategoryScore
    Security45/100
    Privacy55/100
    Data Security50/100
    Network Security88/100
    Code Safety42/100
    Data Collection60/100
    Data Sharing50/100
    User Control65/100

    Positive Security Features

    • No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • Data handling practices present multiple concerns. User information may not be adequately protected while stored or processed within the app.
    • Code quality in this version needs improvement. These issues could affect the reliability of data protection during normal use.
    • The range of third-party services receiving user data is broad. Clearer user-facing controls over what is shared would reduce exposure.

    About This Analysis

    This scorecard reflects automated static analysis of the app's code at the time of the scan. Scores may not reflect changes introduced in later versions.

    App Details

    • App Name: Addiuva Without Borders
    • Package ID: com.addiuva_sin_fronteras
    • Version: 1.4.2
    • Scan Date: 2026-02-10
    • Platform: Android

    Right of Reply

    Developer not yet contacted