LifeSpan Fit Security & Privacy Scorecard
Android
Fitness and health data is shared with Facebook and Google's advertising systems, connecting workout habits to ad profiles that follow users across other apps and websites. Health metrics are collected with limited safeguards on how they are stored. Users will see ads targeted based on physical activity and health goals.
Best for
Casual step tracking with ad-supported fitness goals
Avoid if
You don't want workout data tied to ad profiles
Findings
- 5 critical
- 9 high
- 11 medium
- 4 low
- 2 info
0 issues identified across security and privacy analysis.
Top security issues
- JavaScript Bridge Exposed to Web Content (RCE Risk)
- Facebook SDK Vulnerable to CVE-2023-26085
- Coexisting Encrypted and Unencrypted SQLite Databases
Top privacy issues
- Inaccurate Play Store Data Safety Disclosure
- Health Data Cross-Referenced with Analytics
- Automatic Behavioral Tracking Without Opt-In
Full analysis
LifeSpan Fit
Version: 2.0.9 (Build 43) | Scan Date: February 5, 2026
What This Means for You
Fitness and health data is shared with Facebook and Google's advertising systems, connecting workout habits to ad profiles that follow users across other apps and websites. Health metrics are collected with limited safeguards on how they are stored. Users will see ads targeted based on physical activity and health goals.
Recommendation: Use With Caution
Best For: Casual step tracking with ad-supported fitness goals
Avoid If: You don't want workout data tied to ad profiles
Key Findings
Data Security - 4 findings (1 critical, 2 high, 1 low)
Network Security - 2 findings (1 high, 1 medium)
Code Safety - 0 findings
Privacy - 12 findings (1 critical, 4 high, 4 medium, 3 low)
Privacy Concerns
What Data is Collected
LifeSpan Fit collects step counts, physical activity history, fitness goals, and health metrics. Device identifiers and behavioral patterns are gathered alongside workout data and linked to the user's account.
Third-Party Data Sharing
Fitness and health data flows to Facebook, Google Advertising, and Firebase Analytics. These services use activity information to build advertising profiles that follow users across other apps and websites. Google Health Connect also receives health data for cross-app integration.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 40/100 |
| Privacy | 45/100 |
| Data Security | 35/100 |
| Network Security | 75/100 |
| Code Safety | 40/100 |
| Data Collection | 55/100 |
| Data Sharing | 30/100 |
| User Control | 45/100 |
Positive Security Features
- No notable positive security practices were identified in this version of the app.
Areas for Improvement
- Workout and health data should not be routed to advertising networks. Separating fitness features from ad-targeting services would meaningfully reduce the privacy impact on users.
- Stronger protections are needed for how health metrics are stored, so that data is not accessible beyond the app itself.
- Users should have clearer, easier controls over which data leaves the app and which third parties receive it.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the presence and severity of privacy and security issues found across key categories.
App Details
- App: LifeSpan Fit
- Package ID: com.app.lifespanfit
- Version: 2.0.9 (Build 43)
- Scan Date: February 5, 2026
- Developer: Not listed
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 42/100 |