CITT

    Scan results

    Instagram

    Android

    Instagram is a social media app for sharing photos, videos, and messages with friends and followers. Connect, discover content, and stay updated with your social circle.

    CITT SCORE
    32
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Social sharing with standard data collection trade-offs

    Not For: You want tight control over your personal data

    What It Means For You

    Activity, behavior, and device data are collected extensively and shared with third parties. Payment information is handled through an integrated payment SDK. Users have limited ability to opt out of data collection while using the app.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (15)

    Data Security

    4 total
    3 Critical
    1 Low

    Network Security

    3 total
    1 High
    2 Low

    Code Security

    4 total
    3 Medium
    1 Low

    Privacy

    3 total
    2 Critical
    1 High

    Third-Party Risk

    1 total
    1 High

    Third-Party Services

    Firebase Cloud Messaging, React Native, Trustly Payment SDK, GraphQL, Tigon HTTP Stack
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    sensitive data
    location
    camera
    contacts
    ads
    financial

    Package

    com.instagram.android

    Version

    414.0.0.40.83 (versionCode: 382006479)

    Analysis Date

    Jan 31, 2026

    Classes Analyzed

    485

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (3 critical, 1 low)

    Network Security - 3 findings (1 high, 2 low)

    Code Safety - 0 findings

    Privacy - 3 findings (2 critical, 1 high)

    Privacy Concerns

    What Data is Collected

    Extensive behavioral data is gathered during app use, including content interactions, search activity, browsing patterns within the platform, and device identifiers. Usage habits are tracked across sessions to build a detailed profile used for advertising and content targeting.

    Third-Party Data Sharing

    Data flows to multiple third-party services embedded in the app. Firebase Cloud Messaging handles push notifications and associated device identifiers. The Trustly Payment SDK processes payment-related interactions. The Tigon HTTP Stack and GraphQL layer facilitate ongoing data transmission to advertising and platform infrastructure. React Native serves as the UI framework for portions of the app.

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy30/100
    Data Security25/100
    Network Security70/100
    Code Safety60/100
    Data Collection35/100
    Data Sharing40/100
    User Control25/100

    Positive Security Features

    No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • Personal data stored within the app may not be fully protected, particularly for sensitive information.
    • Data is shared broadly with advertising and analytics partners, and the app offers limited options to restrict that sharing while keeping the app functional.
    • Controls for opting out of behavioral profiling and data collection are minimal, giving users little practical choice over how their information is used.

    About This Analysis

    This scorecard reflects findings from automated static analysis of the app binary and is intended to help users make an informed decision about installing or continuing to use this app. Server-side behaviors and practices not visible in the app itself are not captured here.

    App Details

    • Package: com.instagram.android
    • Version: 414.0.0.40.83 (build 382006479)
    • Scan Date: January 31, 2026

    Right of Reply

    Developer not yet contacted