CITT

    Scan results

    OMNI.reporte

    Android

    OMNI.reporte is a field reporting tool by Primer Impacto that enables users to document and submit incident reports with location data, photos, and attachments. The app is categorized under Tools and rated for Everyone on Google Play.

    CITT SCORE
    45
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Reporting news with standard cloud analytics

    Not For: You share sensitive location or personal details

    What It Means For You

    Activity and crash data are sent to Firebase and Microsoft Azure services. Location may be accessed via Google Maps. Data storage protections are limited, meaning user data may not be fully protected.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (16)

    Data Security

    6 total
    1 Critical
    3 High
    1 Medium
    1 Low

    Network Security

    3 total
    1 Critical
    1 High
    1 Medium

    Code Security

    3 total
    1 Critical
    1 High
    1 Medium

    Privacy

    3 total
    1 High
    2 Medium

    Third-Party Risk

    1 total
    1 High

    Third-Party Services

    Firebase Crashlytics, Firebase Cloud Messaging, Firebase Sessions, Firebase Data Transport, Azure Application Insights, Azure Blob Storage, Google Maps SDK, Apache Tika

    Security Strengths

    • ✓FileProvider Properly Configured
    • ✓Minimal Exported Components
    • ✓HTTPS-Only Communication
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    sensitive data
    location
    camera
    financial
    ads

    Package

    com.primer_impacto.reporte_pi

    Version

    4.35.2

    Analysis Date

    Feb 4, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 6 findings (1 critical, 3 high, 1 medium, 1 low)

    Network Security - 3 findings (1 critical, 1 high, 1 medium)

    Code Safety - 0 findings

    Privacy - 3 findings (1 high, 2 medium)

    Privacy Concerns

    What Data is Collected

    • Crash reports and diagnostic information (via Firebase Crashlytics)
    • App session activity and usage patterns (via Firebase Sessions and Firebase Data Transport)
    • Performance telemetry and application events (via Azure Application Insights)
    • Location data (via Google Maps SDK)
    • File and document content (via Azure Blob Storage and Apache Tika)

    Third-Party Data Sharing

    Data is shared with the following external services:

    • Firebase (Google) - receives crash reports, session activity, and app usage data
    • Microsoft Azure - receives performance data; files may be stored in Azure Blob Storage
    • Google Maps - accesses location to support mapping features
    • Apache Tika - processes documents users interact with inside the app

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy55/100
    Data Security30/100
    Network Security40/100
    Code Safety35/100
    Data Collection70/100
    Data Sharing50/100
    User Control60/100

    Positive Security Features

    • No specific positive security practices were identified for this version of the app.

    Areas for Improvement

    • Data storage protections are limited, meaning user data stored by the app may not be fully protected.
    • Network communications lack sufficient safeguards, meaning data sent between the app and its servers travels with less protection than expected.
    • Privacy transparency could be improved so users have a clearer picture of what is collected and meaningful options to limit it.

    About This Analysis

    This scorecard reflects a static analysis of the app's code and configuration. It evaluates data handling practices, network communication patterns, third-party integrations, and storage behavior.

    App Details

    • App: OMNI.reporte
    • Package ID: com.primer_impacto.reporte_pi
    • Version: 4.35.2
    • Scan Date: 2026-02-04
    • Developer: Not specified

    Right of Reply

    Developer not yet contacted