Ashampoo Photo Organizer Security & Privacy Scorecard

Android

70
Overall trust score
Acceptable
62
Security
77
Privacy

Usage patterns and crash reports are sent to third-party analytics services. Google's face detection technology processes photos on the device to help with organization. Cloud sync only activates when a user connects their own Dropbox, OneDrive, or Google Drive account, and the photo library is not shared with advertisers.

Best for

Organizing personal photos without ad tracking

Avoid if

Users storing sensitive or private photos

Findings

  • 2 critical
  • 3 high
  • 3 medium
  • 4 low
  • 8 info

1 issue identified across security and privacy analysis.

Top security issues

  • OAuth Tokens Stored in Plaintext SharedPreferences
  • Hardcoded OAuth Client Secrets in Source Code
  • Cleartext Traffic Enabled in Manifest

Top privacy issues

  • Google Sign-In Account Data Stored in Plaintext
  • Analytics Device IDs Stored Without Encryption
  • Sentry Session Replay SDK Present

Full analysis

Ashampoo Photo Organizer

Version: 26.1.7 | Analyzed: 2026-03-05

Overall Assessment: 62/100 Security | 77/100 Privacy

What This Means for You

Usage patterns and crash reports are sent to third-party analytics services. Google's face detection technology processes photos on the device to help with organization. Cloud sync only activates when a user connects their own Dropbox, OneDrive, or Google Drive account, and the photo library is not shared with advertisers.

Recommendation: Use With Caution

Best For: Organizing personal photos without ad tracking
Avoid If: Users storing sensitive or private photos

Key Findings

Data Security - 2 findings (1 critical, 1 medium)

Network Security - 1 finding (1 high)

Code Safety - 0 findings

Privacy - 4 findings (2 high, 1 medium, 1 low)

Privacy Concerns

What Data is Collected

Crash reports and usage patterns are collected through Sentry and Countly. Google ML Kit Face Detection processes photos on the device to power the app's organization features. Location coordinates embedded in photos may be sent to OpenCage Geocoding to enable location-based sorting.

Third-Party Data Sharing

Data is shared with the following services:

  • Sentry - Receives crash reports and error data
  • Countly - Receives usage analytics and behavioral data
  • Google ML Kit Face Detection - Processes photo content on the device
  • Firebase Transport - Handles data delivery to Google services
  • OpenCage Geocoding - Receives location coordinates from photos for organization

Cloud storage integrations (Dropbox, OneDrive, Google Drive) are optional and only share data if the user chooses to connect their own account.

Understanding the Scores

Category Score
Security 62/100
Privacy 77/100
Data Security 70/100
Network Security 92/100
Code Safety 74/100
Data Collection 90/100
Data Sharing 99/100
User Control 90/100

Positive Security Features

  • No positive security practices were identified in this version of the app.

Areas for Improvement

  • How photo library data is stored on the device could be better protected against unauthorized access by other apps or processes.
  • The app's connections to outside services could apply more consistent protection during data transmission.
  • The range of usage and behavioral data collected by analytics services could be reduced or made more configurable, giving users clearer control over what leaves the device.

About This Analysis

This scorecard is generated through automated static analysis of the app's compiled code. It reflects findings at the time of the scan and may not capture all potential concerns.

App Details

Field Value
App Name Ashampoo Photo Organizer
Package ID com.ashampoo.photos
Version 26.1.7 (build 157574708)
Scan Date 2026-03-05

Versions & scan history

ScanDateOverall score
#1 (current) 70/100