CITT

    Scan results

    Biomarkers Bryan Johnson

    iOS

    Biomarkers by Bryan Johnson is a health tracking app that monitors blood test results, biomarker levels (cortisol, insulin, testosterone, etc.), and lab appointments. Features physician verification via driver's license photo and telehealth consultation capabilities.

    CITT SCORE
    64
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Tracking personal health and biomarker data

    Not For: You prefer apps that collect minimal analytics data

    What It Means For You

    Usage patterns and in-app behavior are sent to Mixpanel and Segment, two analytics companies. Health and activity data stays reasonably protected, but multiple third-party services receive information about how the app is used.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (22)

    Data Security

    4 total
    2 Medium
    1 Low
    1 Info

    Network Security

    6 total
    1 Medium
    1 Low
    4 Info

    Code Security

    6 total
    1 Medium
    2 Low
    3 Info

    Privacy

    5 total
    1 High
    2 Medium
    1 Low
    1 Info

    Permission Usage

    1 total
    1 Medium

    Third-Party Services

    Mixpanel, Segment, AWS Amplify / Cognito, Expo EAS, LaunchDarkly, Avo Inspector, Google Sign-In, SDWebImage, ReachabilitySwift, JailMonkey, React Native Reanimated, React Native Gesture Handler, RNC AsyncStorage, RNSVG

    Security Strengths

    • ✓Keychain used for secure credential storage with biometric (Face ID) protection
    • ✓ASWebAuthenticationSession used for OAuth flows — properly sandboxed from app JavaScript
    • ✓Universal links configured for magic link auth — resistant to scheme hijacking
    • ✓App Transport Security fully enforced — no arbitrary loads, all 17 endpoints HTTPS
    • ✓Native-layer Frida instrumentation detection via custom build plugin
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    health
    sensitive data
    biometric
    identity verification
    camera
    location
    financial

    Package

    com.bryanjohnson.biomarkers

    Version

    1.0.10 (Build 70)

    Analysis Date

    Mar 31, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on App Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (2 medium, 1 low, 1 info)

    Network Security - 6 findings (1 medium, 1 low, 4 info)

    Code Safety - 0 findings

    Privacy - 5 findings (1 high, 2 medium, 1 low, 1 info)

    Privacy Concerns

    What Data is Collected

    Health and biomarker readings are the core data this app stores. Beyond that, in-app behavior, session activity, and usage patterns are collected for analytics purposes. Device identifiers and interaction events are transmitted to multiple third-party platforms each time the app is used.

    Third-Party Data Sharing

    Usage data is shared with the following third-party services:

    • Mixpanel - Behavioral analytics and event tracking
    • Segment - Data routing and customer data aggregation
    • LaunchDarkly - Feature flag management (receives device and session context)
    • Avo Inspector - Analytics quality monitoring
    • AWS Amplify / Cognito - Authentication and backend services
    • Google Sign-In - Authentication provider
    • Expo EAS - App build and update delivery

    Understanding the Scores

    CategoryScore
    Security85/100
    Privacy55/100
    Data Security72/100
    Network Security85/100
    Code Safety85/100
    Data Collection56/100
    Data Sharing75/100
    User Control70/100

    Positive Security Features

    • The app includes a library to detect modified device environments, providing an added layer of protection for health data stored locally.
    • Authentication is delegated to established providers (Google Sign-In, AWS Cognito) rather than a custom-built system, reducing the risk from authentication mistakes.

    Areas for Improvement

    • Usage behavior is shared with several analytics and data-routing services simultaneously. Providing an opt-out or reducing the number of recipients would meaningfully improve user privacy.
    • How sensitive health data is stored on the device could be strengthened to better protect biomarker records if the device is ever accessed by someone else.
    • Some network connections could be configured more strictly to better protect data while it travels between the app and its servers.

    About This Analysis

    This scorecard is generated through automated static analysis of the app's code and configuration. Scores reflect the app's practices at the time of the scan and may not capture all runtime behaviors.

    App Details

    • App ID: com.bryanjohnson.biomarkers
    • Version: 1.0.10 (Build 70)
    • Scan Date: 2026-03-31
    • Platform: iOS / React Native

    Right of Reply

    Developer not yet contacted