Healix Your Health 247 Security & Privacy Scorecard
Android
Health activity and usage patterns are shared with Google Analytics and Firebase services for performance and crash monitoring. Some stored health information may not be fully protected on the device. Users have moderate but incomplete control over how their personal health data is handled.
Best for
Everyday health tracking with Google-powered features
Avoid if
You need strict security for sensitive medical records
Findings
- 1 critical
- 3 high
- 4 medium
- 2 low
- 6 info
0 issues identified across security and privacy analysis.
Top security issues
- WebView HTTP Authentication Credentials Stored in Plaintext
- Firebase Cloud Messaging Tokens Stored in Plaintext
- Google Analytics Database Stores User Data Unencrypted
Top privacy issues
- Pre-Consent Firebase Analytics Initialization (GDPR Violation)
- No Consent Management Platform (CMP) Detected
- Advertising Identifiers in Medical Application
Full analysis
Healix Your Health 247
com.advancemedical.healix | Version 2.8.4 | Scanned: 2026-03-05
Overall Score: 55/100
What This Means for You
Health activity and usage patterns are shared with Google Analytics and Firebase services for performance and crash monitoring. Some stored health information may not be fully protected on the device. Users have moderate but incomplete control over how their personal health data is handled.
Recommendation: Use With Caution
Best For: Everyday health tracking with Google-powered features
Avoid If: You need strict security for sensitive medical records
Key Findings
Data Security - 3 findings (1 critical, 1 high, 1 medium)
Network Security - 0 findings
Code Safety - 0 findings
Privacy - 3 findings (2 high, 1 medium)
Privacy Concerns
What Data is Collected
Health activity, app usage patterns, and device information are collected by multiple services integrated into this app. Firebase Analytics and Google Analytics track which features users access and how often. Firebase Crashlytics collects device details and activity logs when the app encounters an error. Firebase Cloud Messaging handles push notifications and uses a device identifier to reach users.
Third-Party Data Sharing
Usage data and device identifiers are shared with Google's suite of services, including Firebase Analytics, Firebase Crashlytics, Firebase Performance, Firebase Remote Config, and Google Analytics. Google Play Services and Google OAuth handle account sign-in. Google Play Integrity and Google reCAPTCHA receive signals about the device and user interactions to confirm a real person is using a real device.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 55/100 |
| Privacy | 55/100 |
| Data Security | 45/100 |
| Network Security | 100/100 |
| Code Safety | 92/100 |
| Data Collection | 50/100 |
| Data Sharing | 100/100 |
| User Control | 60/100 |
Positive Security Features
- Network communications are handled securely, keeping user data protected while it travels between the device and the app's servers.
- The app's code is well-structured and follows established safe coding practices, reducing the chance of unexpected behavior.
- Google Play Integrity and reCAPTCHA are used to help protect user accounts from unauthorized access.
- Firebase App Check helps ensure that only legitimate installations of the app can connect to its backend services.
Areas for Improvement
- Some stored health data may not be fully protected on the device. Stronger on-device data protection would reduce the risk to user information if the device is lost or accessed by someone else.
- Usage and behavioral data flows to multiple Google and Firebase services. Clearer opt-out controls would give users more say over what is collected and shared.
- Options for managing personal health data, such as deletion and export, are limited. More accessible privacy settings would give users greater control.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the security and privacy posture of the version analyzed.
App Details
- App Name: Healix Your Health 247
- Package ID: com.advancemedical.healix
- Version: 2.8.4 (Build 512)
- Scan Date: 2026-03-05
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 55/100 |