CITT

    Scan results

    ROM Toolbox Lite

    Android

    ROM Toolbox Lite combines powerful customization and backup tools for advanced Android users including ROM management, backup/restore utilities, CPU tweaking, script editor, and system modification features.

    CITT SCORE
    28
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Android power users comfortable with ad-supported tools

    Not For: Users wanting to limit data shared with ad networks

    What It Means For You

    Usage data is shared with more than 20 advertising and analytics companies, including Facebook, Google, Amazon, and a dozen specialized ad networks. Device activity is used to build an advertising profile and serve targeted ads across platforms. Users have limited control over how their data is used once it leaves the app.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (11)

    Data Security

    3 total
    3 Critical

    Network Security

    1 total
    1 Medium

    Code Security

    3 total
    3 High

    Privacy

    3 total
    1 Critical
    2 High

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Firebase Analytics, Firebase Crashlytics, OneTrust CMP, Maple Media Ivory SDK, AppLovin MAX, Google AdMob, Amazon APS, Facebook Audience Network, Unity Ads, Chartboost, InMobi, Fyber/Digital Turbine, HyprMX, Smaato, MobileFuse, Moloco, Mintegral, Ogury, Pubmatic, UID2/The Trade Desk, Dropbox SDK, Box SDK

    Security Strengths

    • ✓OneTrust consent management with IAB TCF v2 compliance
    • ✓Granular consent controls (Performance, Targeting, Functional)
    • ✓Analytics not initialized until user consent granted
    • ✓Network Security Config enforces HTTPS (except localhost)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    system tools
    root required
    sensitive data
    cloud backup
    contacts
    sms
    ads
    cross app tracking

    Package

    com.jrummy.liberty.toolbox

    Version

    6.9.0 (Build 6521)

    Analysis Date

    Jan 20, 2026

    Classes Analyzed

    36,609

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Unsafe

    Key Findings

    Data Security - 3 findings (3 critical)

    Network Security - 1 finding (1 medium)

    Code Safety - 0 findings

    Privacy - 3 findings (1 critical, 2 high)

    Privacy Concerns

    What Data is Collected

    ROM Toolbox Lite collects device identifiers, usage patterns, and behavioral data to support its advertising and analytics partners. Interactions with the app are logged and tied to the device profile, contributing to an advertising record built around user activity.

    Third-Party Data Sharing

    Data is distributed to more than 20 third-party services spanning advertising, analytics, and cloud storage:

    • Advertising networks: Google AdMob, Facebook Audience Network, Amazon APS, AppLovin MAX, Unity Ads, Chartboost, InMobi, Fyber/Digital Turbine, HyprMX, Smaato, MobileFuse, Moloco, Mintegral, Ogury, Pubmatic, UID2/The Trade Desk, Maple Media Ivory SDK
    • Analytics and crash reporting: Firebase Analytics, Firebase Crashlytics
    • Consent management: OneTrust CMP
    • Cloud storage integrations: Dropbox SDK, Box SDK

    Understanding the Scores

    CategoryScore
    Security25/100
    Privacy30/100
    Data Security20/100
    Network Security75/100
    Code Safety60/100
    Data Collection70/100
    Data Sharing55/100
    User Control45/100

    Positive Security Features

    None identified.

    Areas for Improvement

    • The app does not adequately protect data stored on the device, leaving personal information accessible if the device is used by someone else or accessed without permission.
    • Behavioral data is shared with a large number of advertising partners, each operating under their own data retention and usage practices that users have no visibility into or control over.
    • The privacy controls available are limited, making it difficult to restrict the scope of data collection or opt out of targeted advertising across the full network of partners.

    About This Analysis

    This scorecard reflects technical analysis of the app as distributed. Results apply to the version listed below.

    App Details

    FieldValue
    App NameROM Toolbox Lite
    Package IDcom.jrummy.liberty.toolbox
    Version6.9.0 (Build 6521)
    Scan DateJanuary 20, 2026

    Right of Reply

    Developer not yet contacted