CITT

    Scan results

    Nest

    iOS

    Google Nest home security and smart home control app for managing cameras, smart locks, alarms, and environmental devices. Handles face recognition and occupancy monitoring.

    CITT SCORE
    74
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Smart home control from your phone

    What It Means For You

    Usage data flows through Firebase, which tracks app performance and supports remote configuration. Apple's ad attribution network can link user activity to advertising campaigns. Data is handled with reasonable care, and sharing with outside parties is limited.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (23)

    Data Security

    7 total
    2 Medium
    3 Low
    2 Info

    Network Security

    5 total
    1 Medium
    1 Low
    3 Info

    Code Security

    5 total
    4 Low
    1 Info

    Privacy

    5 total
    1 High
    2 Medium
    1 Low
    1 Info

    Third-Party Risk

    1 total
    1 Info

    Third-Party Services

    Firebase Core 10.29.0, Firebase Crashlytics 10.29.0, Firebase Performance 10.29.0, Firebase Remote Config 10.29.0, Firebase Installations 10.29.0, Firebase ABTesting 10.29.0, Firebase Sessions 10.29.0, AppAuth 1.7.6, GoogleDataTransport 9.4.0, GTMSessionFetcher 4.2.0, GRPCClient 1.15.0, CocoaAsyncSocket 7.6.3, CocoaLumberjack 3.4.2, SDWebImage 5.20.0, Lottie 4.5.1, Protobuf 3.9.2, NHNetworkTime 1.11.0, libPhoneNumber-iOS 0.9.13, youtube-ios-player-helper 1.0.4, BoringSSL (Google fork), Speex / Opus_ios, Google reCAPTCHA iosguard, SKAdNetwork, Apple Ads Attribution (AAAttribution)

    Security Strengths

    • ✓App Transport Security fully enforced — only localhost HTTP exception for IoT device pairing
    • ✓OAuth tokens stored in Keychain (correct approach) with full token lifecycle management
    • ✓Matter/Weave IoT protocol uses CASE+PASE with EC keypairs and BoringSSL — robust cryptographic device authentication
    • ✓Physical IoT device tamper detection implemented (NLKTamperTrait) for Nest hardware
    • ✓Privacy-compliant ad attribution via SKAdNetwork and AAAttribution — no IDFA cross-app tracking declared
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    smart home
    location
    camera
    sensitive data
    biometric
    security devices
    contacts
    ads

    Package

    com.nestlabs.jasper.release

    Version

    5.86.3 (Build 5.86.3.0)

    Analysis Date

    Mar 29, 2026

    Classes Analyzed

    42,355

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on App Store

    Recommendation: Acceptable

    Key Findings

    Data Security - 7 findings (2 medium, 3 low, 2 info)

    Network Security - 5 findings (1 medium, 1 low, 3 info)

    Code Safety - 0 findings

    Privacy - 5 findings (1 high, 2 medium, 1 low, 1 info)

    Privacy Concerns

    What Data is Collected

    The app collects device performance metrics, crash reports, and usage analytics through Firebase. Ad attribution services record whether the app was installed through an advertising campaign and can associate user activity with ad networks.

    Third-Party Data Sharing

    Data is shared with the following third parties:

    • Google (Firebase) - Performance monitoring, crash diagnostics, usage analytics, and remote configuration
    • Apple Ads Attribution - Links installation and in-app activity to advertising campaigns
    • SKAdNetwork - Provides anonymized conversion signals to advertising networks

    Understanding the Scores

    CategoryScore
    Security80/100
    Privacy72/100
    Data Security72/100
    Network Security92/100
    Code Safety90/100
    Data Collection74/100
    Data Sharing88/100
    User Control77/100

    Positive Security Features

    • Network communication is secured using well-established protections, keeping data safe in transit
    • The app handles user sign-in through a recognized, reputable authentication approach
    • Strong code safety practices reduce the risk of common coding mistakes that could expose user data

    Areas for Improvement

    • Data stored on the device could be better protected against unauthorized access by other apps
    • Privacy disclosures have one area of higher concern related to how personal data is categorized and disclosed
    • The app could offer users more direct controls over what data is collected and how it is used

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect observed practices at the time of the scan and may not capture all runtime behaviors.

    App Details

    FieldValue
    Packagecom.nestlabs.jasper.release
    Version5.86.3 (Build 5.86.3.0)
    Scan Date2026-03-29

    Right of Reply

    Developer not yet contacted