drawnames | Secret Santa app Security & Privacy Scorecard
Android
User activity is tracked by Firebase, Google Analytics, and Meta/Facebook SDKs, meaning usage patterns may inform ad targeting across other apps. Sentry collects crash and error data from user sessions. User data is shared with several third parties, so participation in gift exchanges may feed into broader advertising profiles.
Best for
Holiday gift exchanges with friends and family
Avoid if
You prefer not sharing data with Facebook and Meta
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Outdated AndroidX Security Crypto Library with CVE-2024-2441
- Unencrypted Google Analytics Database Stores PII and Device Fingerprints
- Facebook Client Token Exposed in APK
Top privacy issues
- Sentry Session Replay Captures PII Without User Consent
- Meta SDK Advanced Matching Enables Cross-Platform Tracking
- Firebase Installation ID Enables Long-Term User Tracking
Full analysis
drawnames | Secret Santa app
What This Means for You
User activity is tracked by Firebase, Google Analytics, and Meta/Facebook SDKs, meaning usage patterns may inform ad targeting across other apps. Sentry collects crash and error data from user sessions. User data is shared with several third parties, so participation in gift exchanges may feed into broader advertising profiles.
Recommendation: Use With Caution
Best For: Holiday gift exchanges with friends and family
Avoid If: You prefer not sharing data with Facebook and Meta
Key Findings
Data Security - 3 findings (1 critical, 1 high, 1 medium)
Network Security - 2 findings (2 low)
Code Safety - 0 findings
Privacy - 4 findings (1 critical, 1 high, 2 medium)
Privacy Concerns
What Data is Collected
The app collects behavioral and usage data through Firebase Analytics and Google Analytics, tracking how users interact with its features. Sentry gathers session-level error and crash data tied to user activity. The Meta and Facebook SDKs collect information that can be linked to user advertising profiles across the Meta ecosystem.
Third-Party Data Sharing
User data is shared with Google, Meta, and Facebook. These companies can combine what they collect here with data from other apps and services, building a broader picture of user habits and interests for ad targeting purposes.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 70/100 |
| Privacy | 55/100 |
| Data Security | 60/100 |
| Network Security | 95/100 |
| Code Safety | 65/100 |
| Data Collection | 50/100 |
| Data Sharing | 55/100 |
| User Control | 60/100 |
Positive Security Features
- Supports Google Sign-In and Sign In with Apple, letting users authenticate with existing trusted accounts rather than creating a new password for this app.
Areas for Improvement
- Some data stored by the app could be read by other apps installed on the device.
- Users have limited ability to control what data is shared with advertising networks.
- The number of third parties receiving user data is higher than necessary for core gift-exchange functionality.
About This Analysis
This scorecard is based on a technical review of the app's code and observed behavior. Scores reflect the state of the app at the time of analysis and may change with future updates.
App Details
- App: drawnames | Secret Santa app
- Package: com.meetrixonline.drawnames
- Version: 1.75.1 (Build 1574)
- Analyzed: 2026-02-05
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 62/100 |