CITT

    Scan results

    ChatGPT

    Android

    ChatGPT for Android brings OpenAI's AI capabilities to your device with image generation, advanced voice mode, and photo analysis. Free app syncs history across devices with latest OpenAI features including creative inspiration and personalized learning.

    CITT SCORE
    52
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: AI chat users comfortable with standard analytics

    Not For: Sharing sensitive personal or health information

    What It Means For You

    Conversations and app usage are tracked by multiple analytics and behavioral data companies, including Segment and Firebase. Device details, session activity, and in-app interactions are collected and shared with third-party providers. For subscribers, billing behavior is also processed by external payment services.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (20)

    Data Security

    6 total
    3 High
    3 Medium

    Network Security

    2 total
    2 Low

    Code Security

    2 total
    1 Critical
    1 Medium

    Privacy

    9 total
    2 Critical
    2 High
    2 Medium
    3 Low

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Sentry, Segment, Datadog RUM, Statsig, Firebase Analytics, Auth0, Stripe, RevenueCat, Persona, LiveKit, Apollo GraphQL, Pairip, OkHttp

    Security Strengths

    • ✓Pairip Anti-Tamper Protection with VM-based integrity verification
    • ✓Aggressive R8/ProGuard obfuscation (40,426 classes)
    • ✓Secure FileProvider configuration with content:// URIs
    • ✓Backup disabled (android:allowBackup=false)
    • ✓AndroidKeyStore for hardware-backed key pairs
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    ai
    sensitive data
    financial
    authentication
    biometric
    analytics heavy
    subscription
    camera
    location

    Package

    com.openai.chatgpt

    Version

    1.2026.027 (Build 2602719)

    Analysis Date

    Jan 30, 2026

    Classes Analyzed

    40,426

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 6 findings (3 high, 3 medium)

    Network Security - 2 findings (2 low)

    Code Safety - 0 findings

    Privacy - 9 findings (2 critical, 2 high, 2 medium, 3 low)

    Privacy Concerns

    What Data is Collected

    ChatGPT collects a broad range of data about user devices and behavior. This includes device identifiers, session activity, in-app interactions, and usage patterns. For users who create an account, account details and conversation history are stored. Subscription and billing information is processed when a plan is purchased.

    Third-Party Data Sharing

    User data is shared with several third-party services:

    • Analytics and behavioral tracking: Segment, Firebase Analytics, Statsig, and Datadog RUM receive data about app usage and session activity.
    • Error and performance monitoring: Sentry and Datadog RUM process technical performance data.
    • Authentication: Auth0 handles user identity and login flow.
    • Payments: Stripe and RevenueCat process subscription and billing data.
    • Identity verification: Persona processes identity-related information.
    • Real-time communication: LiveKit handles audio and video data during voice conversations.

    Understanding the Scores

    CategoryScore
    Security55/100
    Privacy50/100
    Data Security45/100
    Network Security85/100
    Code Safety60/100
    Data Collection55/100
    Data Sharing60/100
    User Control85/100

    Positive Security Features

    • Network security practices earned a strong score, with secure communication handling observed across the app's connections.
    • User control features scored well, reflecting meaningful account and data management options available to users.

    Areas for Improvement

    • The app shares user behavioral data with multiple third-party analytics providers, expanding the number of companies that have access to usage patterns.
    • Subscription and billing activity is processed by external payment services, adding additional parties to the financial data flow.
    • The scope of data collection across device identifiers, session activity, and in-app interactions could be reduced to limit what is shared with outside parties.

    About This Analysis

    This scorecard is based on automated static analysis of the app's compiled code and configuration. Scores reflect observed practices at the time of the scan and may not capture all behaviors, particularly those occurring only at runtime or in specific user scenarios.

    App Details

    • App Name: ChatGPT
    • Package ID: com.openai.chatgpt
    • Version: 1.2026.027 (Build 2602719)
    • Scan Date: 2026-01-30

    Right of Reply

    Developer not yet contacted