VMOSCloud-Android Cloud Phone Security & Privacy Scorecard
Android
User activity is tracked by multiple advertising and attribution companies including Facebook, Adjust, and Singular. Data also flows to platforms operated by ByteDance and Baidu, both China-based technology companies. Users have limited control over what is collected or how it is used across these services.
Best for
Cloud Android users comfortable with broad data sharing
Avoid if
Users concerned about China-based data sharing
Findings
- 6 critical
- 11 high
- 9 medium
- 1 low
- 1 info
0 issues identified across security and privacy analysis.
Top security issues
- Authentication Token Exposed to WebView JavaScript
- Unencrypted Storage of Authentication Credentials
- Unrestricted Activity Navigation from JavaScript
Top privacy issues
- Comprehensive Behavioral Tracking Without Opt-Out
- Third-Party Analytics Data Sharing (6 SDKs)
- Analytics Initialization Before User Consent
Full analysis
VMOSCloud-Android Cloud Phone
What This Means for You
User activity is tracked by multiple advertising and attribution companies including Facebook, Adjust, and Singular. Data also flows to platforms operated by ByteDance and Baidu, both China-based technology companies. Users have limited control over what is collected or how it is used across these services.
Recommendation: Don't Trust
Best For: Cloud Android users comfortable with broad data sharing
Avoid If: Users concerned about China-based data sharing
Key Findings
Data Security - 5 findings (1 critical, 2 high, 1 medium, 1 low)
Network Security - 4 findings (2 critical, 1 high, 1 medium)
Code Safety - 0 findings
Privacy - 5 findings (2 high, 3 medium)
Privacy Concerns
What Data is Collected
The app collects behavioral, device, and session data across its features. Advertising and attribution services gather information about how the app is used, device identifiers, and in-app actions. Payment processors collect financial transaction details whenever a purchase is made.
Third-Party Data Sharing
Data is shared with the following third-party services:
- Adjust - Mobile attribution and advertising analytics
- Singular - Marketing attribution and analytics
- Facebook SDK - Advertising and behavioral profiling
- Firebase Analytics - Usage and event analytics
- Mob SDK - Mobile analytics
- Volcano Engine (ByteDance) - Data platform operated by a China-based company
- Baidu PaaS - Cloud services operated by a China-based company
- Tencent MMKV / Mars XLog - Storage and logging libraries from a China-based company
- Alipay / WeChat Pay - Payment processing
- Airwallex - Payment processing
- Google Play Billing / Google Sign-In - Platform services
Understanding the Scores
| Category | Score |
|---|---|
| Security | 25/100 |
| Privacy | 35/100 |
| Data Security | 20/100 |
| Network Security | 15/100 |
| Code Safety | 30/100 |
| Data Collection | 40/100 |
| Data Sharing | 35/100 |
| User Control | 25/100 |
Positive Security Features
This app does not demonstrate notable positive security practices.
Areas for Improvement
- The app sends data over connections that lack adequate protection, meaning user data may not be fully protected during transit.
- How the app stores and handles sensitive data contains critical gaps that put user personal information at unnecessary risk.
- Data is shared broadly across more than a dozen third-party services, several of which are operated by China-based companies, with no meaningful controls for users to limit or opt out of that sharing.
About This Analysis
App Details
| Field | Value |
|---|---|
| App Name | VMOSCloud-Android Cloud Phone |
| Package ID | com.geniuscloud.overseasplatform |
| Version | 2.0.64.0 (Build 2140) |
| Scan Date | 2026-02-10 |
Scores and findings reflect the state of the app at the time of analysis and are intended to help users make informed installation decisions.
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 30/100 |