Google Security & Privacy Scorecard
Android
Searches, voice queries, and browsing activity are collected and linked to the user's Google profile. This behavior is shared with Google Analytics and Google Ads to build an advertising profile. Meta-developed components are embedded in the app, meaning usage patterns flow through additional third-party infrastructure.
Best for
Google users comfortable with broad data collection
Avoid if
You want to limit Google from profiling your activity
Findings
- 1 critical
- 6 high
- 9 medium
- 3 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Unencrypted Local Database Storage of User Data
- Global Cleartext HTTP Traffic Allowed
- CardWebView Disables URL Allowlisting Protection
Top privacy issues
- Comprehensive Behavioral Profiling Across Multiple Dimensions
- Background Location Tracking Enables Continuous Physical Surveillance
- Voice Recordings and Hotword Detection Create Audio Surveillance Risk
Full analysis
Overall Score: 43/100 | Grade: F
| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 35/100 |
What This Means for You
Searches, voice queries, and browsing activity are collected and linked to the user's Google profile. This behavior is shared with Google Analytics and Google Ads to build an advertising profile. Meta-developed components are embedded in the app, meaning usage patterns flow through additional third-party infrastructure.
Recommendation: Use With Caution
Best For: Google users comfortable with broad data collection
Avoid If: You want to limit Google from profiling your activity
Key Findings
Data Security - 3 findings (1 critical, 1 high, 1 medium)
Network Security - 3 findings (1 high, 2 medium)
Code Safety - 0 findings
Privacy - 5 findings (2 high, 1 medium, 2 low)
Privacy Concerns
What Data is Collected
Search queries, voice commands, browsing activity, and usage patterns are collected each time the app is used. Device identifiers and location signals are gathered to personalize search results and build an advertising profile linked to the user's Google account.
Third-Party Data Sharing
Activity data flows to the following third parties:
- Firebase - App analytics and crash reporting
- Google Analytics - Behavioral tracking and usage analysis
- Google Ads - Advertising targeting and measurement
- Litho (Meta) - UI framework with Meta infrastructure
- Yoga (Meta) - Layout engine with Meta infrastructure
- Lottie (Airbnb) - Animation rendering
- Glide (Bumptech) - Image loading
- Google Play Services - Core Google platform integration
Understanding the Scores
| Score | Value |
|---|---|
| Security | 45/100 |
| Privacy | 35/100 |
| Data Security | 40/100 |
| Network Security | 60/100 |
| Code Safety | 50/100 |
| Data Collection | 25/100 |
| Data Sharing | 45/100 |
| User Control | 40/100 |
Positive Security Features
- None identified.
Areas for Improvement
- Limit behavioral data collection to what is needed for search, rather than building an advertising profile across all user activity.
- Provide clearer in-app controls so users can adjust what data is shared with advertising and analytics services.
- Reduce reliance on Meta-developed frameworks that route usage patterns through additional corporate infrastructure.
About This Analysis
This report is based on automated static analysis of the app's code and configuration. It reflects the state of the app at the time of the scan and may not capture runtime behavior.
App Details
| Field | Value |
|---|---|
| App Name | |
| Package ID | com.google.android.googlequicksearchbox |
| Version | 17.3.60.ve.arm64 (301684842) |
| Scan Date | 2026-01-30 |
| Platform | Android |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 40/100 |