CITT

    Scan results

    VMOSCloud-Android Cloud Phone

    Android

    VMOS Cloud – The World's Leading Android Cloud Phone for Efficient Multi-Instance Usage & Seamless Global App Access! Enables playing games, managing multiple social media accounts, and accessing global app stores in the cloud without consuming local resources.

    CITT SCORE
    30
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Cloud Android users comfortable with broad data sharing

    Not For: Users concerned about China-based data sharing

    What It Means For You

    User activity is tracked by multiple advertising and attribution companies including Facebook, Adjust, and Singular. Data also flows to platforms operated by ByteDance and Baidu, both China-based technology companies. Users have limited control over what is collected or how it is used across these services.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (21)

    Data Security

    5 total
    1 Critical
    2 High
    1 Medium
    1 Low

    Network Security

    4 total
    2 Critical
    1 High
    1 Medium

    Code Security

    6 total
    1 Critical
    2 High
    3 Medium

    Privacy

    5 total
    2 High
    3 Medium

    Third-Party Risk

    1 total
    1 High

    Third-Party Services

    Adjust SDK, Singular SDK, Facebook SDK, Firebase Analytics, Mob SDK, Volcano Engine (ByteDance), Alipay, WeChat Pay, Airwallex, Google Play Billing, Google Sign-In, Baidu PaaS, Tencent MMKV, Tencent Mars XLog

    Security Strengths

    • ✓HTTPS enforced on all API calls
    • ✓AES-128 encryption for analytics payloads
    • ✓No SQL database (eliminates SQL injection risk)
    • ✓Code obfuscation applied (ProGuard/R8)
    • ✓Third-party SDK WebViews configured securely (Alipay, Google Ads, Tencent)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    cloud
    multi account
    payment processing
    chinese sdks
    extensive tracking
    webview risk

    Package

    com.geniuscloud.overseasplatform

    Version

    2.0.64.0 (Build 2140)

    Analysis Date

    Feb 10, 2026

    Classes Analyzed

    149

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Don't Trust

    Key Findings

    Data Security - 5 findings (1 critical, 2 high, 1 medium, 1 low)

    Network Security - 4 findings (2 critical, 1 high, 1 medium)

    Code Safety - 0 findings

    Privacy - 5 findings (2 high, 3 medium)

    Privacy Concerns

    What Data is Collected

    The app collects behavioral, device, and session data across its features. Advertising and attribution services gather information about how the app is used, device identifiers, and in-app actions. Payment processors collect financial transaction details whenever a purchase is made.

    Third-Party Data Sharing

    Data is shared with the following third-party services:

    • Adjust - Mobile attribution and advertising analytics
    • Singular - Marketing attribution and analytics
    • Facebook SDK - Advertising and behavioral profiling
    • Firebase Analytics - Usage and event analytics
    • Mob SDK - Mobile analytics
    • Volcano Engine (ByteDance) - Data platform operated by a China-based company
    • Baidu PaaS - Cloud services operated by a China-based company
    • Tencent MMKV / Mars XLog - Storage and logging libraries from a China-based company
    • Alipay / WeChat Pay - Payment processing
    • Airwallex - Payment processing
    • Google Play Billing / Google Sign-In - Platform services

    Understanding the Scores

    CategoryScore
    Security25/100
    Privacy35/100
    Data Security20/100
    Network Security15/100
    Code Safety30/100
    Data Collection40/100
    Data Sharing35/100
    User Control25/100

    Positive Security Features

    This app does not demonstrate notable positive security practices.

    Areas for Improvement

    • The app sends data over connections that lack adequate protection, meaning user data may not be fully protected during transit.
    • How the app stores and handles sensitive data contains critical gaps that put user personal information at unnecessary risk.
    • Data is shared broadly across more than a dozen third-party services, several of which are operated by China-based companies, with no meaningful controls for users to limit or opt out of that sharing.

    About This Analysis

    App Details

    FieldValue
    App NameVMOSCloud-Android Cloud Phone
    Package IDcom.geniuscloud.overseasplatform
    Version2.0.64.0 (Build 2140)
    Scan Date2026-02-10

    Scores and findings reflect the state of the app at the time of analysis and are intended to help users make informed installation decisions.

    Right of Reply

    Developer not yet contacted