DELTAPLAN Security & Privacy Scorecard

DELTAPLAN

What This Means for You

User activity is tracked by Firebase Analytics and shared with Google. Push notifications are managed by OneSignal, which monitors engagement patterns. Stored data may not be fully protected and is at elevated risk if the device is accessed by others.

Recommendation: Use With Caution

Best For: Users comfortable with Google and push notification

Avoid If: Users who store sensitive personal data in the app

Key Findings

Data Security - 7 findings (3 critical, 2 high, 2 medium)

Network Security - 3 findings (1 high, 2 medium)

Code Safety - 0 findings

Privacy - 1 finding (1 high)

Privacy Concerns

What Data is Collected

DELTAPLAN collects behavioral and engagement data through Firebase Analytics and Firebase Messaging. This includes in-app activity patterns, notification interaction history, and device identifiers linked to the user's Google account.

Third-Party Data Sharing

Data is shared with the following third parties:

• Google (via Firebase Analytics, Firebase Messaging, Firebase Data Transport, and Google Play Services): receives usage patterns, device information, and behavioral data
• OneSignal: receives engagement patterns and notification interaction history to manage push notification delivery

Understanding the Scores

Positive Security Features

No notable security protections were identified in this version of the app.

Areas for Improvement

• Data storage protection needs significant strengthening. Sensitive information stored on the device is at elevated risk if the device is accessed by others.
• Consistent communication security could be applied more broadly throughout the app to reduce the chance of data traveling with less protection than expected.
• User controls over data collection could be expanded to give users more visibility and choice over what information is gathered and sent to third parties.

About This Analysis

App Details