CITT

    Scan results

    BM2

    Android

    BM2 is an application for monitoring car battery voltage and health through Bluetooth connectivity. It tracks real-time battery voltage, historical data, startup and charging tests, and syncs data to the mobile app. Includes Wear OS support for displaying battery test results.

    CITT SCORE
    30
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Battery monitoring with tolerance for analytics sharing

    Not For: You avoid apps with China-based analytics services

    What It Means For You

    Usage data is collected by Umeng, a Chinese analytics platform, along with device identifiers from MIUI and Vivo. Network traffic is handled with weak protections, meaning data sent from the device may not be fully protected on public Wi-Fi. Customer service features connect to a third-party platform, meaning support conversations may leave the device.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (27)

    Data Security

    7 total
    2 High
    2 Medium
    1 Low
    2 Info

    Network Security

    5 total
    1 Critical
    1 High
    2 Low
    1 Info

    Code Security

    5 total
    3 Medium
    1 Low
    1 Info

    Privacy

    5 total
    2 High
    2 Medium
    1 Info

    Third-Party Risk

    3 total
    3 Info

    Permission Usage

    2 total
    2 Low

    Third-Party Services

    Umeng Analytics, Umeng EFS Performance SDK, OkGo (OkHttp wrapper), Glide, Qiyu/NetEase Unicorn (customer service), LuckSifu PictureSelector, BlankJ AndroidUtilCode, Google Play Services, SmartRefreshLayout, RxJava, Gson, BRVAH, EventBus, PermissionX, OkHttp3/Okio, MIUI Device ID, Vivo Device ID

    Security Strengths

    • ✓RSA encryption applied to battery measurement payloads before upload (independent of TLS)
    • ✓Analytics SDK (UMConfigure.init, Unicorn.initSdk) fully initialized only after user consent
    • ✓Consent dialog is mandatory and non-dismissible with privacy policy link
    • ✓All SQL queries use parameterized statements — no SQL injection risk
    • ✓WebView does not override onReceivedSslError — secure default preserved
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    iot
    bluetooth
    location
    sensitive data
    ads

    Package

    com.dc.battery.monitor2

    Version

    3.8.0 (versionCode: 111)

    Analysis Date

    Feb 17, 2026

    Classes Analyzed

    9,308

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 7 findings (2 high, 2 medium, 1 low, 2 info)

    Network Security - 5 findings (1 critical, 1 high, 2 low, 1 info)

    Code Safety - 0 findings

    Privacy - 5 findings (2 high, 2 medium, 1 info)

    Privacy Concerns

    What Data is Collected

    This app collects device identifiers specific to MIUI and Vivo hardware, along with behavioral and usage data gathered through Umeng analytics services. These identifiers allow user activity to be linked across sessions and potentially connected to user identity across other apps using the same services.

    Third-Party Data Sharing

    User data is shared with Umeng Analytics and Umeng EFS Performance SDK, both operating under Chinese data jurisdiction. Customer service interactions are routed through Qiyu/NetEase Unicorn, a third-party support platform, meaning support conversations are stored on external servers outside the app. Behavioral profiling data may be processed in regions with different privacy protections than those in the user's region.

    Understanding the Scores

    • Overall Security: 28/100
    • Overall Privacy: 32/100
    • Data Security: 38/100
    • Network Security: 18/100
    • Code Safety: 52/100
    • Data Collection: 40/100
    • Data Sharing: 35/100
    • User Control: 30/100

    Positive Security Features

    • No notable positive security practices were identified for this app.

    Areas for Improvement

    • Network communications should use stronger protections so that data sent from the device travels with full protection on public Wi-Fi.
    • The scope of data sharing with third-party analytics services could be reduced, giving users more control over what information leaves the device.
    • Collection of manufacturer-specific device identifiers from MIUI and Vivo goes beyond what a battery monitoring app requires and adds unnecessary tracking scope.

    About This Analysis

    App Details

    • App Name: BM2
    • Package ID: com.dc.battery.monitor2
    • Version: 3.8.0 (build 111)
    • Scan Date: February 17, 2026
    • Platform: Android

    Right of Reply

    Developer not yet contacted