CITT

    Scan results

    drawnames | Secret Santa app

    Android

    A Secret Santa gift exchange app that simplifies organizing group gift swaps with wish lists, exclusions, and cross-device support. Over 1M downloads with a 4.8 rating. No account required—just create a group, set exclusions, and draw names.

    CITT SCORE
    62
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Holiday gift exchanges with friends and family

    Not For: You prefer not sharing data with Facebook and Meta

    What It Means For You

    User activity is tracked by Firebase, Google Analytics, and Meta/Facebook SDKs, meaning usage patterns may inform ad targeting across other apps. Sentry collects crash and error data from user sessions. User data is shared with several third parties, so participation in gift exchanges may feed into broader advertising profiles.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (14)

    Data Security

    3 total
    1 Critical
    1 High
    1 Medium

    Network Security

    2 total
    2 Low

    Code Security

    5 total
    1 Critical
    2 High
    2 Medium

    Privacy

    4 total
    1 Critical
    1 High
    2 Medium

    Third-Party Services

    Firebase Analytics, Google Analytics, Sentry, Meta SDK, Facebook SDK, Google Sign-In, Sign In with Apple

    Security Strengths

    • ✓OAuth 2.0 authentication with encrypted token storage
    • ✓JavaScript disabled by default in WebView
    • ✓All network endpoints use HTTPS
    • ✓SSL errors properly rejected in Facebook WebView
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    sensitive data
    contacts
    ads
    location

    Package

    com.meetrixonline.drawnames

    Version

    1.75.1 (Build 1574)

    Analysis Date

    Feb 5, 2026

    Classes Analyzed

    4,963

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (1 critical, 1 high, 1 medium)

    Network Security - 2 findings (2 low)

    Code Safety - 0 findings

    Privacy - 4 findings (1 critical, 1 high, 2 medium)

    Privacy Concerns

    What Data is Collected

    The app collects behavioral and usage data through Firebase Analytics and Google Analytics, tracking how users interact with its features. Sentry gathers session-level error and crash data tied to user activity. The Meta and Facebook SDKs collect information that can be linked to user advertising profiles across the Meta ecosystem.

    Third-Party Data Sharing

    User data is shared with Google, Meta, and Facebook. These companies can combine what they collect here with data from other apps and services, building a broader picture of user habits and interests for ad targeting purposes.

    Understanding the Scores

    CategoryScore
    Security70/100
    Privacy55/100
    Data Security60/100
    Network Security95/100
    Code Safety65/100
    Data Collection50/100
    Data Sharing55/100
    User Control60/100

    Positive Security Features

    • Supports Google Sign-In and Sign In with Apple, letting users authenticate with existing trusted accounts rather than creating a new password for this app.

    Areas for Improvement

    • Some data stored by the app could be read by other apps installed on the device.
    • Users have limited ability to control what data is shared with advertising networks.
    • The number of third parties receiving user data is higher than necessary for core gift-exchange functionality.

    About This Analysis

    This scorecard is based on a technical review of the app's code and observed behavior. Scores reflect the state of the app at the time of analysis and may change with future updates.

    App Details

    • App: drawnames | Secret Santa app
    • Package: com.meetrixonline.drawnames
    • Version: 1.75.1 (Build 1574)
    • Analyzed: 2026-02-05

    Right of Reply

    Developer not yet contacted