CITT

    Scan results

    Playback: background play

    Android

    Playback is a music and video player browser app that enables background streaming with picture-in-picture mode, even with the screen off. Features include playlist creation, bookmarking, and the ability to listen to podcasts and music while locked.

    CITT SCORE
    42
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Casual video watchers comfortable with Google ads

    Not For: You want an ad-free experience

    What It Means For You

    Usage behavior is collected by Firebase and shared with Google for advertising, meaning users will see targeted ads based on how they use the app. Users have limited control over how their data is used, and crash reports from the device are sent to Google automatically.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (16)

    Data Security

    2 total
    1 High
    1 Medium

    Network Security

    1 total
    1 High

    Code Security

    5 total
    1 Critical
    2 Medium
    1 Low
    1 Info

    Privacy

    7 total
    2 High
    4 Medium
    1 Low

    Third-Party Risk

    1 total
    1 Info

    Third-Party Services

    Firebase Crashlytics, Firebase Remote Config, Firebase Sessions, Firebase Installations, Firebase A/B Testing, Firebase Data Transport, Google Mobile Ads, Google Play Billing, Google Play Services, Pairip License Check

    Security Strengths

    • ✓Code obfuscation implemented
    • ✓No custom JavaScript interfaces (prevents RCE)
    • ✓SQL injection prevention via Room parameterized queries
    • ✓Backup disabled (no cloud exposure)
    • ✓Minimal third-party dependencies (95% Google)
    • ✓Firebase Analytics disabled by default
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    media
    ads
    tracking
    webview
    sensitive data
    privacy risk

    Package

    com.androxus.playback

    Version

    2.0.1 (Build 92)

    Analysis Date

    Feb 1, 2026

    Classes Analyzed

    8,662

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (1 high, 1 medium)

    Network Security - 1 finding (1 high)

    Code Safety - 0 findings

    Privacy - 7 findings (2 high, 4 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    The app collects data about how users interact with it, including session patterns, app activity, and device crash information. Firebase services tie this behavioral data to the device across sessions.

    Third-Party Data Sharing

    User data is shared with the following third parties:

    • Google (Firebase, Google Mobile Ads) - Receives usage patterns, session activity, and crash reports, and uses this information to serve targeted advertising.
    • Pairip - Receives device information for license verification purposes.

    Understanding the Scores

    CategoryScore
    Security45/100
    Privacy38/100
    Data Security50/100
    Network Security55/100
    Code Safety60/100
    Data Collection40/100
    Data Sharing45/100
    User Control25/100

    Positive Security Features

    No positive security protections were identified in this version of the app.

    Areas for Improvement

    • Usage data is shared with Google advertising services automatically, with no in-app option to limit or opt out of this data collection.
    • Crash reports containing device details are sent to Google without explicit user consent or a way to disable this from within the app.
    • User ability to manage or control how data is used is very limited, reflected in a User Control score of 25 out of 100.

    About This Analysis

    This scorecard is generated from automated static analysis of the app's code and observed data practices. Scores reflect the state of the app at the version listed below.

    App Details

    • Package ID: com.androxus.playback
    • Version: 2.0.1 (Build 92)
    • Analysis Date: 2026-02-01
    • Platform: Android

    Right of Reply

    Developer not yet contacted