Ashampoo Photo Organizer Security & Privacy Scorecard
Android
Usage patterns and crash reports are sent to third-party analytics services. Google's face detection technology processes photos on the device to help with organization. Cloud sync only activates when a user connects their own Dropbox, OneDrive, or Google Drive account, and the photo library is not shared with advertisers.
Best for
Organizing personal photos without ad tracking
Avoid if
Users storing sensitive or private photos
Findings
- 2 critical
- 3 high
- 3 medium
- 4 low
- 8 info
1 issue identified across security and privacy analysis.
Top security issues
- OAuth Tokens Stored in Plaintext SharedPreferences
- Hardcoded OAuth Client Secrets in Source Code
- Cleartext Traffic Enabled in Manifest
Top privacy issues
- Google Sign-In Account Data Stored in Plaintext
- Analytics Device IDs Stored Without Encryption
- Sentry Session Replay SDK Present
Full analysis
Ashampoo Photo Organizer
Version: 26.1.7 | Analyzed: 2026-03-05
Overall Assessment: 62/100 Security | 77/100 Privacy
What This Means for You
Usage patterns and crash reports are sent to third-party analytics services. Google's face detection technology processes photos on the device to help with organization. Cloud sync only activates when a user connects their own Dropbox, OneDrive, or Google Drive account, and the photo library is not shared with advertisers.
Recommendation: Use With Caution
Best For: Organizing personal photos without ad tracking
Avoid If: Users storing sensitive or private photos
Key Findings
Data Security - 2 findings (1 critical, 1 medium)
Network Security - 1 finding (1 high)
Code Safety - 0 findings
Privacy - 4 findings (2 high, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
Crash reports and usage patterns are collected through Sentry and Countly. Google ML Kit Face Detection processes photos on the device to power the app's organization features. Location coordinates embedded in photos may be sent to OpenCage Geocoding to enable location-based sorting.
Third-Party Data Sharing
Data is shared with the following services:
- Sentry - Receives crash reports and error data
- Countly - Receives usage analytics and behavioral data
- Google ML Kit Face Detection - Processes photo content on the device
- Firebase Transport - Handles data delivery to Google services
- OpenCage Geocoding - Receives location coordinates from photos for organization
Cloud storage integrations (Dropbox, OneDrive, Google Drive) are optional and only share data if the user chooses to connect their own account.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 62/100 |
| Privacy | 77/100 |
| Data Security | 70/100 |
| Network Security | 92/100 |
| Code Safety | 74/100 |
| Data Collection | 90/100 |
| Data Sharing | 99/100 |
| User Control | 90/100 |
Positive Security Features
- No positive security practices were identified in this version of the app.
Areas for Improvement
- How photo library data is stored on the device could be better protected against unauthorized access by other apps or processes.
- The app's connections to outside services could apply more consistent protection during data transmission.
- The range of usage and behavioral data collected by analytics services could be reduced or made more configurable, giving users clearer control over what leaves the device.
About This Analysis
This scorecard is generated through automated static analysis of the app's compiled code. It reflects findings at the time of the scan and may not capture all potential concerns.
App Details
| Field | Value |
|---|---|
| App Name | Ashampoo Photo Organizer |
| Package ID | com.ashampoo.photos |
| Version | 26.1.7 (build 157574708) |
| Scan Date | 2026-03-05 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 70/100 |