GoDaddy Investor Security & Privacy Scorecard
Android
In-app behavior and session activity is recorded by FullStory, which captures detailed screen interactions. Usage data is also shared with Firebase Analytics and Singular for analytics and attribution tracking. Crash reports and feedback submitted within the app may be processed by third-party services outside GoDaddy.
Best for
GoDaddy shareholders comfortable with analytics
Findings
- 0 critical
- 1 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- JWT Authentication Tokens Stored in Plaintext
- Realm Database Stored Without Encryption
- Exported WebView Activity with No URL Validation
Top privacy issues
- Pre-Consent Analytics Tracking
- User Preferences Stored in Plaintext
- FullStory Records Sensitive Data
Full analysis
GoDaddy Investor
Security Score: 35/100 | Privacy Score: 45/100
Platform: Android | Version: 4.9.23 (Build 201) | Analysis Date: 2026-02-03
What This Means for You
In-app behavior and session activity is recorded by FullStory, which captures detailed screen interactions. Usage data is also shared with Firebase Analytics and Singular for analytics and attribution tracking. Crash reports and feedback submitted within the app may be processed by third-party services outside GoDaddy.
Recommendation: Use With Caution
Best For: GoDaddy shareholders comfortable with analytics
Key Findings
Data Security - 4 findings (2 critical, 1 high, 1 medium)
Network Security - 1 finding (1 high)
Code Safety - 0 findings
Privacy - 4 findings (2 high, 2 medium)
Privacy Concerns
What Data is Collected
GoDaddy Investor collects data about in-app behavior, screen interactions, and session activity. This includes device identifiers, usage patterns, and any feedback submitted within the app.
Third-Party Data Sharing
User data is shared with the following third-party services:
- FullStory - Records detailed screen interactions and session replays for behavior analysis
- Firebase Analytics - Tracks usage patterns and in-app behavior
- Firebase Crashlytics - Receives crash reports that may include device and session details
- Singular - Receives attribution and analytics data about how the app is used
- Apptentive - Processes feedback and in-app survey responses
- Parse - Used for backend data processing
- Split.io - Receives usage data to manage feature availability
- Realm - Handles local data storage on the device
Understanding the Scores
| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 45/100 |
| Data Security | 30/100 |
| Network Security | 80/100 |
| Code Safety | 40/100 |
| Data Collection | 50/100 |
| Data Sharing | 60/100 |
| User Control | 55/100 |
Positive Security Features
- None identified in this version.
Areas for Improvement
- Data security practices need strengthening, particularly around how sensitive information is stored and protected on the device.
- Behavioral data is shared with multiple third-party analytics and attribution services, with limited visibility or opt-out controls available to users.
- Crash reports and feedback submissions may transmit details about the device and app activity to external services outside GoDaddy's direct control.
About This Analysis
This scorecard is based on analysis of the app's compiled code and configuration. Scores reflect observed behaviors and practices at the time of this review.
App Details
- App: GoDaddy Investor
- Package: com.godaddy.gdm.investorapp
- Version: 4.9.23 (Build 201)
- Analysis Date: 2026-02-03
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 40/100 |