CITT

    Scan results

    Beeper: Universal Chat

    Android

    Beeper is a universal chat app that consolidates messaging from WhatsApp, Signal, Telegram, SMS/RCS, Facebook Messenger, Instagram, Twitter, Discord, Slack, and other networks into one inbox. Developed by Automattic, Inc.

    CITT SCORE
    72
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Consolidating multiple chats with standard analytics

    What It Means For You

    User activity, including which conversations are opened and how frequently the app is used, is tracked through Rudderstack analytics and shared with that service. Crash reports collected by Sentry may capture details about the device and app state at the time of a crash. Beyond those two services, the app gathers minimal personal data.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (13)

    Data Security

    5 total
    2 Critical
    2 High
    1 Medium

    Network Security

    1 total
    1 High

    Code Security

    5 total
    1 Critical
    1 High
    1 Medium
    2 Low

    Privacy

    1 total
    1 Medium

    Permission Usage

    1 total
    1 Medium

    Third-Party Services

    Firebase FCM, Google ML Kit, Rudderstack, Google Maps API, Google AI (Gemini), Matrix SDK, Sentry

    Security Strengths

    • ✓Privacy-first analytics (opt-in only, anonymous, minimal data)
    • ✓Modern Android security features (backup disabled, network security config)
    • ✓Memory-safe Matrix SDK (Rust implementation)
    • ✓No session recording or invasive tracking SDKs
    • ✓Proper HTTPS enforcement and TLS validation
    • ✓Minimal SDK footprint (25+ SDKs, focused on functionality)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    sensitive data
    contacts
    messaging
    multi platform
    e2ee

    Package

    com.beeper.android

    Version

    4.36.3 (1744135684)

    Analysis Date

    Jan 21, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Acceptable

    Key Findings

    Data Security - 5 findings (2 critical, 2 high, 1 medium)

    Network Security - 1 finding (1 high)

    Code Safety - 0 findings

    Privacy - 1 finding (1 medium)

    Privacy Concerns

    What Data is Collected

    Beeper collects crash and diagnostic information through Sentry, which may include the device model, operating system version, and app state at the time of a crash. Usage patterns, including which conversations are opened and how frequently the app is used, are collected through Rudderstack analytics. Firebase handles push notifications, associating the device with the user's account for message delivery.

    Third-Party Data Sharing

    Usage activity is shared with Rudderstack for analytics. Crash and diagnostic data is shared with Sentry. Push notification delivery routes through Firebase, a Google service. The app also integrates Google ML Kit, Google Maps API, and Google AI (Gemini) for messaging features, which means certain interactions are processed by Google's infrastructure.

    Understanding the Scores

    CategoryScore
    Security70/100
    Privacy75/100
    Data Security70/100
    Network Security85/100
    Code Safety70/100
    Data Collection95/100
    Data Sharing90/100
    User Control95/100

    Positive Security Features

    • No notable positive security features were identified in this version.

    Areas for Improvement

    • The app has several data storage concerns that could leave messages and account information less protected if the device is accessed by another person.
    • Network connection protections could be strengthened to better safeguard communications in transit.
    • Some code safety practices fall below current standards, which could make the app more susceptible to certain types of attacks.

    About This Analysis

    This scorecard is based on static analysis of the app's code and configuration. Scores reflect the state of the app at the time of analysis and may not capture all server-side behaviors.

    App Details

    • App: Beeper: Universal Chat
    • Package: com.beeper.android
    • Version: 4.36.3 (1744135684)
    • Scan Date: 2026-01-21

    Right of Reply

    Developer not yet contacted