Fay Nutrition Dietitians Security & Privacy Scorecard

Android

32
Overall trust score
Unsafe
38
Security
25
Privacy

Dietary habits, health goals, and in-app behavior are tracked by analytics and behavioral profiling services including Mixpanel and Statsig. Usage data is shared with multiple third parties, and users have limited control over what is collected or how it is used. Those entering sensitive health details should review the privacy policy before signing up.

Best for

Nutrition coaching covered by insurance

Avoid if

Sharing sensitive diagnoses or health conditions

Findings

  • 0 critical
  • 0 high
  • 1 medium
  • 0 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • Unencrypted Room Database - PHI Exposure
  • Unencrypted SharedPreferences - Token & Patient Data Exposure
  • Unrestricted Cloud Backup - PHI Transmitted to Google

Top privacy issues

  • Sentry Screenshot Capture - PHI Transmitted to Third Party
  • Third-Party Analytics Without BAA
  • Timber Logging in Production

Full analysis

Fay Nutrition Dietitians

What This Means for You

Dietary habits, health goals, and in-app behavior are tracked by analytics and behavioral profiling services including Mixpanel and Statsig. Usage data is shared with multiple third parties, and users have limited control over what is collected or how it is used. Those entering sensitive health details should review the privacy policy before signing up.

Recommendation: Use With Caution

Best For: Nutrition coaching covered by insurance
Avoid If: Sharing sensitive diagnoses or health conditions

Key Findings

Data Security - 3 findings (2 critical, 1 high)

Network Security - 0 findings

Code Safety - 0 findings

Privacy - 4 findings (2 critical, 1 high, 1 medium)

Privacy Concerns

What Data is Collected

Fay Nutrition Dietitians collects data about dietary habits, health goals, and how users interact with the app. Behavioral profiling services record in-app activity, including which features are used and how often, to build a profile of user habits over time. Crash reporting services may capture device information and app state. Cloud infrastructure services store and process user data, including health-related content entered in the app.

Third-Party Data Sharing

User data is shared with multiple third-party services:

  • Mixpanel - Behavioral analytics and user profiling
  • Statsig - Feature experimentation and behavioral analytics
  • Firebase Cloud Messaging - Push notification delivery
  • Sentry - Error and crash reporting, which may include device and session data
  • AWS Amplify, Cognito, S3, Chime SDK - Cloud storage, authentication, and video communications infrastructure
  • Conscrypt - Underlying network security library

Understanding the Scores

Category Score
Security 38/100
Privacy 25/100
Data Security 15/100
Network Security 85/100
Code Safety 62/100
Data Collection 40/100
Data Sharing 20/100
User Control 30/100

Security (38/100): The app's protection of sensitive data falls short in key areas, pulling the overall security score down significantly.

Privacy (25/100): Broad data collection paired with extensive third-party sharing and limited user control result in a low privacy score.

Data Security (15/100): How personal health information is stored and protected is a significant factor in the low overall score.

Network Security (85/100): Communications between the app and its servers are generally well protected in transit.

Code Safety (62/100): The app's code structure is reasonably sound, though some areas could be strengthened.

Data Collection (40/100): The app collects a wide range of data about users and their health habits.

Data Sharing (20/100): User data is distributed to multiple external parties with limited transparency about how it is used.

User Control (30/100): Users have very limited ability to manage what is collected, opt out of tracking, or request data deletion from within the app.

Positive Security Features

  • No standout security practices were identified in this version of the app.

Areas for Improvement

  • How sensitive personal health data is stored and protected needs significant strengthening to reduce the risk of unauthorized access.
  • Behavioral data is shared with multiple analytics providers. Providing users with clear, accessible controls to limit or opt out of this sharing would better respect user privacy.
  • Users currently have little say in what data is collected or how it is used. Meaningful in-app privacy controls, especially for health-related data, would give users more control.

About This Analysis

This scorecard is based on automated static analysis of the app's code and behavior patterns. Scores reflect the state of the app at the time of the scan and may not capture every possible risk or recent updates.

App Details

  • App Name: Fay Nutrition Dietitians
  • Package ID: com.faynutrition.android
  • Version: 1.28.0
  • Platform: Android
  • Scan Date: 2025-12-19

Versions & scan history

ScanDateOverall score
#2 (current) 32/100
#1 62/100