AnyList: Grocery Shopping List Security & Privacy Scorecard
Android
In-app behavior is tracked by Segment and Mixpanel, and usage data flows to Firebase Analytics. Crash reports are sent to Bugsnag. Grocery lists and shopping habits are shared with eMeals, a meal planning partner.
Best for
Grocery planners comfortable with standard analytics
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- SSL Certificate Bypass in eMeals SDK
- Remote WebView Debugging Enabled in Production
- File Access Enabled in eMeals SDK WebView
Top privacy issues
- Analytics Tracking Without User Consent
- PII Collection in Analytics Events
- GDPR Right to Erasure Violation
Full analysis
AnyList: Grocery Shopping List
Security Score: 55/100 | Privacy Score: 45/100
What This Means for You
In-app behavior is tracked by Segment and Mixpanel, and usage data flows to Firebase Analytics. Crash reports are sent to Bugsnag. Grocery lists and shopping habits are shared with eMeals, a meal planning partner.
Recommendation: Use With Caution
Best For: Grocery planners comfortable with standard analytics
Key Findings
Data Security - 2 findings (2 medium)
Network Security - 3 findings (1 critical, 1 high, 1 medium)
Code Safety - 0 findings
Privacy - 5 findings (4 high, 1 medium)
Privacy Concerns
What Data is Collected
The app collects grocery lists, in-app activity, and device identifiers. Shopping habits and usage patterns are gathered to support analytics services and third-party integrations.
Third-Party Data Sharing
App data is shared with the following third-party services:
- Segment and Mixpanel: behavioral analytics tracking in-app actions
- Firebase Analytics: usage and engagement tracking by Google
- Firebase Cloud Messaging: push notification delivery
- Bugsnag: crash and error reporting
- Google Maps and Google Play Services Location: location-based features
- eMeals: grocery list and shopping habit data for meal planning integration
Understanding the Scores
| Category | Score |
|---|---|
| Security | 55/100 |
| Privacy | 45/100 |
| Data Security | 75/100 |
| Network Security | 35/100 |
| Code Safety | 60/100 |
| Data Collection | 50/100 |
| Data Sharing | 40/100 |
| User Control | 45/100 |
Positive Security Features
- The app relies on standard platform protections without additional security-hardening measures.
Areas for Improvement
- Network communication sends some data with less protection than expected in certain situations.
- Shopping and usage data is shared with multiple analytics providers, with limited options for users to restrict this.
- The scope of behavioral data collected and shared with partners extends beyond what is needed for core grocery list functionality.
About This Analysis
App Details
| App | AnyList: Grocery Shopping List |
| Package | com.purplecover.anylist |
| Version | 2.0.9 (Build 266) |
| Scan Date | 2026-01-31 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 50/100 |