Monarch: Budget & Track Money Security & Privacy Scorecard
Android
Linked bank accounts and financial transactions flow through multiple third-party services, including analytics and marketing platforms that track how users interact with the app. Data travels over connections where financial information may not be fully protected on public Wi-Fi. At least a dozen outside companies receive data from user activity.
Best for
Budgeters comfortable sharing financial data
Avoid if
You prefer minimal third-party data sharing
Findings
- 3 critical
- 6 high
- 7 medium
- 2 low
- 8 info
1 issue identified across security and privacy analysis.
Top security issues
- SSL/TLS Certificate Validation Completely Disabled in OAuth Flow
- Cleartext HTTP Traffic Explicitly Allowed App-Wide
- OAuth Access Tokens and Refresh Tokens Stored Without Encryption
Top privacy issues
- Pre-Consent Firebase Analytics Tracking
- Advertising ID Collection in Financial Application
- Session Recording Without Explicit User Consent
Full analysis
Monarch: Budget & Track Money
Overall Security Score: 38/100 | Privacy Score: 72/100
com.monarchmoney.mobile | Version 2.0.84 | Scanned: March 15, 2026
What This Means for You
Linked bank accounts and financial transactions flow through multiple third-party services, including analytics and marketing platforms that track how users interact with the app. Data travels over connections where financial information may not be fully protected on public Wi-Fi. At least a dozen outside companies receive data from user activity.
Recommendation: Use With Caution
Best For: Budgeters comfortable sharing financial data
Avoid If: You prefer minimal third-party data sharing
Key Findings
Data Security - 3 findings (1 critical, 2 high)
Network Security - 4 findings (2 critical, 2 high)
Code Safety - 0 findings
Privacy - 1 finding (1 high)
Privacy Concerns
What Data is Collected
Monarch collects financial account data, transaction history, and behavioral usage patterns across linked accounts. The app monitors how users interact with budgeting features and tracks spending activity over time.
Third-Party Data Sharing
User data is shared with at least 12 outside services:
- Plaid Link (financial account access)
- Firebase Analytics (usage tracking)
- Firebase Messaging (push notifications)
- Sentry (error reporting)
- Customer.io (marketing communications)
- Singular (advertising attribution)
- Segment Analytics (behavioral data aggregation)
- RevenueCat (subscription management)
- Mastercard Open Banking (banking data access)
- Sprig / Userleap (in-app surveys and feedback)
- Google ML Kit (on-device processing)
- Google Play Billing (payment processing)
Understanding the Scores
| Category | Score |
|---|---|
| Security | 38/100 |
| Privacy | 72/100 |
| Data Security | 48/100 |
| Network Security | 42/100 |
| Code Safety | 92/100 |
| Data Collection | 78/100 |
| Data Sharing | 100/100 |
| User Control | 82/100 |
Positive Security Features
- Code-level protections score in the top range, with very few safety concerns identified at the application code layer (92/100)
- Data sharing practices are fully transparent and score at the maximum, indicating accountable third-party integration (100/100)
- User control features provide meaningful options over account and data preferences (82/100)
Areas for Improvement
- The connections used to send financial data between the device and the app's servers provide less protection than expected, meaning banking information may not be fully protected in transit.
- How financial data is stored and handled inside the app falls below the standard expected for software that manages sensitive banking account information.
- The breadth of outside companies receiving data from user activity is high for a personal finance app, meaning more parties have access to financial patterns than is typical.
About This Analysis
This scorecard is based on automated static analysis of the app's code and observable behavior patterns. Scores reflect the security and privacy posture at the time of the scan and may change with future app updates.
App Details
- App Name: Monarch: Budget & Track Money
- Package ID: com.monarchmoney.mobile
- Version: 2.0.84 (build 12914)
- Scan Date: March 15, 2026
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 55/100 |