CITT

    Scan results

    AnyList: Grocery Shopping List

    Android

    AnyList is a grocery shopping list and meal planning app that helps families organize shopping trips, share lists in real-time, import recipes, and plan weekly meals. Trusted by millions with 4.8-star rating.

    CITT SCORE
    50
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Grocery planners comfortable with standard analytics

    What It Means For You

    In-app behavior is tracked by Segment and Mixpanel, and usage data flows to Firebase Analytics. Crash reports are sent to Bugsnag. Grocery lists and shopping habits are shared with eMeals, a meal planning partner.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (16)

    Data Security

    2 total
    2 Medium

    Network Security

    3 total
    1 Critical
    1 High
    1 Medium

    Code Security

    4 total
    2 High
    2 Medium

    Privacy

    5 total
    4 High
    1 Medium

    Third-Party Risk

    2 total
    2 Medium

    Third-Party Services

    Segment, Mixpanel, Firebase Analytics, Firebase Cloud Messaging, Bugsnag, Google Maps, Google Play Services Location, Google Play Billing, ML Kit Barcode Scanning, eMeals, OkHttp3, Glide, RxJava, Protocol Buffers, EventBus

    Security Strengths

    • ✓AES-256-GCM encryption for credentials
    • ✓Extensive code obfuscation (466 packages)
    • ✓HTTPS enforced for AnyList domains
    • ✓Backup disabled
    • ✓No weak cryptography detected
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    grocery
    meal planning
    recipes
    location
    sensitive data
    analytics
    third party integrations

    Package

    com.purplecover.anylist

    Version

    2.0.9 (Build 266)

    Analysis Date

    Jan 31, 2026

    Classes Analyzed

    8,773

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (2 medium)

    Network Security - 3 findings (1 critical, 1 high, 1 medium)

    Code Safety - 0 findings

    Privacy - 5 findings (4 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    The app collects grocery lists, in-app activity, and device identifiers. Shopping habits and usage patterns are gathered to support analytics services and third-party integrations.

    Third-Party Data Sharing

    App data is shared with the following third-party services:

    • Segment and Mixpanel: behavioral analytics tracking in-app actions
    • Firebase Analytics: usage and engagement tracking by Google
    • Firebase Cloud Messaging: push notification delivery
    • Bugsnag: crash and error reporting
    • Google Maps and Google Play Services Location: location-based features
    • eMeals: grocery list and shopping habit data for meal planning integration

    Understanding the Scores

    CategoryScore
    Security55/100
    Privacy45/100
    Data Security75/100
    Network Security35/100
    Code Safety60/100
    Data Collection50/100
    Data Sharing40/100
    User Control45/100

    Positive Security Features

    • The app relies on standard platform protections without additional security-hardening measures.

    Areas for Improvement

    • Network communication sends some data with less protection than expected in certain situations.
    • Shopping and usage data is shared with multiple analytics providers, with limited options for users to restrict this.
    • The scope of behavioral data collected and shared with partners extends beyond what is needed for core grocery list functionality.

    About This Analysis

    App Details

    AppAnyList: Grocery Shopping List
    Packagecom.purplecover.anylist
    Version2.0.9 (Build 266)
    Scan Date2026-01-31

    Right of Reply

    Developer not yet contacted