CITT

    Scan results

    DELTAPLAN

    Android

    DELTAPLAN is a workplace roster and communication app for managing guard schedules, viewing colleague contact information, and enabling instant messaging. The app allows users to track their work shifts, view entire workplace rosters, express interest in vacant positions, and communicate with cowork

    CITT SCORE
    38
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Users comfortable with Google and push notification

    Not For: You store sensitive personal data in the app

    What It Means For You

    User activity is tracked by Firebase Analytics and shared with Google. Push notifications are managed by OneSignal, which monitors engagement patterns. Stored data may not be fully protected and is at elevated risk if the device is accessed by others.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (14)

    Data Security

    7 total
    3 Critical
    2 High
    2 Medium

    Network Security

    3 total
    1 High
    2 Medium

    Code Security

    3 total
    1 Critical
    1 High
    1 Medium

    Privacy

    1 total
    1 High

    Third-Party Services

    OneSignal, Firebase Messaging, Firebase Analytics, Firebase Data Transport, Google Play Services

    Security Strengths

    • ✓Backup disabled for app and WorkManager
    • ✓No hardcoded secrets in BuildConfig
    • ✓Database queries use parameterization (no SQL injection)
    • ✓Proper SSL/TLS validation (no bypass)
    • ✓HTTPS enforced by platform default
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    workplace
    communication
    roster
    location
    sensitive data
    employee tracking

    Package

    com.deltaplanapp

    Version

    2.3.10 (Build 2314)

    Analysis Date

    Jan 27, 2026

    Classes Analyzed

    4

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 7 findings (3 critical, 2 high, 2 medium)

    Network Security - 3 findings (1 high, 2 medium)

    Code Safety - 0 findings

    Privacy - 1 finding (1 high)

    Privacy Concerns

    What Data is Collected

    DELTAPLAN collects behavioral and engagement data through Firebase Analytics and Firebase Messaging. This includes in-app activity patterns, notification interaction history, and device identifiers linked to the user's Google account.

    Third-Party Data Sharing

    Data is shared with the following third parties:

    • Google (via Firebase Analytics, Firebase Messaging, Firebase Data Transport, and Google Play Services): receives usage patterns, device information, and behavioral data
    • OneSignal: receives engagement patterns and notification interaction history to manage push notification delivery

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy42/100
    Data Security25/100
    Network Security78/100
    Code Safety55/100
    Data Collection65/100
    Data Sharing70/100
    User Control58/100

    Positive Security Features

    No notable security protections were identified in this version of the app.

    Areas for Improvement

    • Data storage protection needs significant strengthening. Sensitive information stored on the device is at elevated risk if the device is accessed by others.
    • Consistent communication security could be applied more broadly throughout the app to reduce the chance of data traveling with less protection than expected.
    • User controls over data collection could be expanded to give users more visibility and choice over what information is gathered and sent to third parties.

    About This Analysis

    App Details

    FieldValue
    App NameDELTAPLAN
    Packagecom.deltaplanapp
    Version2.3.10 (Build 2314)
    Scan Date2026-01-27
    DeveloperNot listed

    Right of Reply

    Developer not yet contacted