CITT

    Scan results

    InstaChat WP - Quick Chat

    Android

    InstaChat WP allows you to start WhatsApp chats without saving contact numbers. Features include instant chat launch, chat history, QR code scanning/generation, aliases, and multilingual support for quick and convenient messaging.

    CITT SCORE
    76
    out of 100
    TRUSTish

    Quick Verdict

    Best for: WhatsApp users who want a different interface

    Not For: You prefer not to share usage data with Google

    What It Means For You

    Usage patterns and crash reports are sent to Firebase and Google. Two critical findings were identified affecting how user data is stored and handled on the device. Users have limited control over what is collected.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (9)

    Data Security

    2 total
    1 Critical
    1 High

    Network Security

    1 total
    1 Medium

    Code Security

    3 total
    1 Medium
    2 Low

    Privacy

    3 total
    1 Critical
    1 High
    1 Low

    Third-Party Services

    Firebase Analytics, Firebase Crashlytics, Firebase Installations, Google Play Services, Pairip License Check

    Security Strengths

    • ✓Modern architecture (Jetpack Compose, Kotlin, MVVM)
    • ✓No WebView (eliminates web-based attacks)
    • ✓No SQL database (eliminates injection attacks)
    • ✓Intent-based messaging (end-to-end encryption maintained)
    • ✓Minimal permissions (no camera, location, or contacts)
    • ✓Heavy obfuscation (93.8% of code)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    sensitive data
    contacts

    Package

    com.jomibusa.instachatwp

    Version

    24.0.1

    Analysis Date

    Feb 4, 2026

    Classes Analyzed

    4,781

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (1 critical, 1 high)

    Network Security - 1 finding (1 medium)

    Code Safety - 0 findings

    Privacy - 3 findings (1 critical, 1 high, 1 low)

    Privacy Concerns

    What Data is Collected

    This app collects usage patterns and device information through Firebase Analytics and Firebase Crashlytics. Crash reports, including details about app usage and device state, are automatically sent to Google servers.

    Third-Party Data Sharing

    Activity data is shared with the following services:

    • Firebase Analytics - Usage and behavioral data sent to Google
    • Firebase Crashlytics - Crash and error reports sent to Google
    • Firebase Installations - Device identification data sent to Google
    • Google Play Services - App licensing and device data sent to Google
    • Pairip License Check - License validation data shared with Pairip

    Understanding the Scores

    CategoryScore
    Security82/100
    Privacy70/100
    Data Security75/100
    Network Security95/100
    Code Safety92/100
    Data Collection75/100
    Data Sharing85/100
    User Control70/100

    Positive Security Features

    • No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • The way user data is stored on the device could be made more secure, reducing the chance that other apps or users could access it without authorization.
    • Users have limited options to control or reduce how much information is collected about their usage, making it harder to limit what is shared with Google.
    • Clearer communication about what data is collected and how long it is retained would give users more confidence in how their information is handled.

    About This Analysis

    App Details

    FieldValue
    App NameInstaChat WP - Quick Chat
    Packagecom.jomibusa.instachatwp
    Version24.0.1
    Scan Date2026-02-04
    DeveloperNot listed

    Right of Reply

    Developer not yet contacted