Avans One Security & Privacy Scorecard
Android
Usage behavior is tracked by Firebase Analytics and Datadog to monitor app performance. User activity may be used to improve the service, but is not shared with advertising networks. Google Sign-In handles login, meaning Google sees when and how often the app is used.
Best for
Avans students managing their schedule daily
Findings
- 0 critical
- 2 high
- 4 medium
- 0 low
- 5 info
1 issue identified across security and privacy analysis.
Top security issues
- Expo OTA Updates Without Code Signing Verification
- AsyncStorage Stores Data in Plain Text SQLite
- No Server-Side Secrets in Client Code
Top privacy issues
- Pre-Consent Advertising Tracking Enabled
- No Data Deletion Mechanism for User Privacy Rights
- PII Exposure Risk via Analytics Events
Full analysis
Avans One
Version: 1.2.0 (Build 35)
Analyzed: 2026-03-25
What This Means for You
Usage behavior is tracked by Firebase Analytics and Datadog to monitor app performance. User activity may be used to improve the service, but is not shared with advertising networks. Google Sign-In handles login, meaning Google sees when and how often the app is used.
Recommendation: Trustworthy
Best For: Avans students managing their schedule daily
Key Findings
Data Security - 2 findings (1 medium, 1 info)
Network Security - 2 findings (2 info)
Code Safety - 0 findings
Privacy - 4 findings (2 high, 2 medium)
Privacy Concerns
What Data is Collected
The app collects account identity through Google Sign-In and monitors app usage through Firebase Analytics and Datadog RUM. This includes session activity, feature interactions, and device performance metrics sent to Google and Datadog servers.
Third-Party Data Sharing
Data is shared with the following services:
- Firebase Analytics (Google) - collects usage and behavioral patterns
- Firebase Cloud Messaging (Google) - delivers push notifications to the device
- Datadog RUM - monitors app performance and session activity
- Google Sign-In (Google) - manages account login
- Google ML Kit Barcode (Google) - processes barcode scanning on the device
- Apollo GraphQL - handles data requests between the app and its servers
- Expo Updates - manages app update delivery
All identified services serve functional or analytical purposes, not advertising.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 96/100 |
| Privacy | 75/100 |
| Data Security | 96/100 |
| Network Security | 100/100 |
| Code Safety | 98/100 |
| Data Collection | 73/100 |
| Data Sharing | 100/100 |
| User Control | 78/100 |
Positive Security Features
- Strong network communication practices, reflected in a perfect Network Security score
- High code safety standards maintained throughout the app
Areas for Improvement
- The app could provide clearer information about what behavioral data is collected and how long it is retained.
- Users would benefit from more granular controls over analytics and data collection preferences.
- Privacy disclosures could be more transparent about the scope of information shared with Google services.
About This Analysis
This scorecard is based on static analysis of the app's code, examining security and privacy practices. Scores reflect the app's behavior at the version analyzed and may not reflect subsequent updates.
App Details
- App Name: Avans One
- Package ID: com.avans.avansonern
- Version: 1.2.0 (Build 35)
- Scan Date: 2026-03-25
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 81/100 |