Beeper: Universal Chat Security & Privacy Scorecard
Android
User activity, including which conversations are opened and how frequently the app is used, is tracked through Rudderstack analytics and shared with that service. Crash reports collected by Sentry may capture details about the device and app state at the time of a crash. Beyond those two services, the app gathers minimal personal data.
Best for
Consolidating multiple chats with standard analytics
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
1 issue identified across security and privacy analysis.
Top security issues
- WebView File Access Enabled
- JavaScript Interface Exposed in OAuth WebView
- Unencrypted Message Database (All Chat History)
Top privacy issues
- Unencrypted Message Database (All Chat History)
- Third-Party Cookies Enabled in WebView
- Exported Content Provider with Custom Permissions
Full analysis
Beeper: Universal Chat
What This Means for You
User activity, including which conversations are opened and how frequently the app is used, is tracked through Rudderstack analytics and shared with that service. Crash reports collected by Sentry may capture details about the device and app state at the time of a crash. Beyond those two services, the app gathers minimal personal data.
Recommendation: Acceptable
Best For: Consolidating multiple chats with standard analytics
Key Findings
Data Security - 5 findings (2 critical, 2 high, 1 medium)
Network Security - 1 finding (1 high)
Code Safety - 0 findings
Privacy - 1 finding (1 medium)
Privacy Concerns
What Data is Collected
Beeper collects crash and diagnostic information through Sentry, which may include the device model, operating system version, and app state at the time of a crash. Usage patterns, including which conversations are opened and how frequently the app is used, are collected through Rudderstack analytics. Firebase handles push notifications, associating the device with the user's account for message delivery.
Third-Party Data Sharing
Usage activity is shared with Rudderstack for analytics. Crash and diagnostic data is shared with Sentry. Push notification delivery routes through Firebase, a Google service. The app also integrates Google ML Kit, Google Maps API, and Google AI (Gemini) for messaging features, which means certain interactions are processed by Google's infrastructure.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 70/100 |
| Privacy | 75/100 |
| Data Security | 70/100 |
| Network Security | 85/100 |
| Code Safety | 70/100 |
| Data Collection | 95/100 |
| Data Sharing | 90/100 |
| User Control | 95/100 |
Positive Security Features
- No notable positive security features were identified in this version.
Areas for Improvement
- The app has several data storage concerns that could leave messages and account information less protected if the device is accessed by another person.
- Network connection protections could be strengthened to better safeguard communications in transit.
- Some code safety practices fall below current standards, which could make the app more susceptible to certain types of attacks.
About This Analysis
This scorecard is based on static analysis of the app's code and configuration. Scores reflect the state of the app at the time of analysis and may not capture all server-side behaviors.
App Details
- App: Beeper: Universal Chat
- Package: com.beeper.android
- Version: 4.36.3 (1744135684)
- Scan Date: 2026-01-21
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #4 (current) | 72/100 | |
| #3 | 42/100 | |
| #2 | 42/100 |