Reddit Security & Privacy Scorecard

Android

75
Overall trust score
Acceptable
78
Security
72
Privacy

User activity, posts viewed, and interactions are tracked across sessions for analytics. Crash reports and device data are sent to Google. An attribution service records how the user found the app and links in-app behavior back to referral sources.

Best for

Active Reddit users comfortable with standard analytics

Findings

  • 0 critical
  • 0 high
  • 0 medium
  • 0 low
  • 4 info

1 issue identified across security and privacy analysis.

Top security issues

  • Main Database Unencrypted at Rest
  • Vault Cryptocurrency Storage Method Unclear
  • Cleartext HTTP Traffic Permitted for Third-Party Domains

Top privacy issues

  • Advertising ID Collection Without User Consent
  • Analytics Database Backed Up to Google Drive
  • No User Controls for Analytics Tracking

Full analysis

Reddit

Version: 2025.46.0 (Build 2546031)
Scan Date: 2026-01-20

What This Means for You

User activity, posts viewed, and interactions are tracked across sessions for analytics. Crash reports and device data are sent to Google. An attribution service records how the user found the app and links in-app behavior back to referral sources.

Recommendation: Acceptable

Best For: Active Reddit users comfortable with standard analytics

Key Findings

Data Security - 4 findings (2 critical, 2 medium)

Network Security - 3 findings (1 critical, 1 high, 1 info)

Code Safety - 0 findings

Privacy - 8 findings (1 critical, 3 high, 3 medium, 1 info)

Privacy Concerns

What Data is Collected

Reddit collects user browsing activity, posts viewed, votes, comments, and session interactions. Device information and diagnostic data are captured through Google Firebase and Crashlytics. Branch.io records how the user discovered or was referred to the app and ties that back to in-app behavior.

Third-Party Data Sharing

Data is shared with the following services:

  • Google Firebase and Crashlytics - Receives device diagnostics, crash reports, and app usage data
  • Google Play Services - Handles platform-level integration
  • Branch.io - Receives attribution and referral data linked to user behavior
  • Firebase Cloud Messaging - Delivers push notifications on Google infrastructure

Understanding the Scores

Category Score
Security 78/100
Privacy 72/100
Data Security 70/100
Network Security 80/100
Code Safety 82/100
Data Collection 75/100
Data Sharing 80/100
User Control 70/100

Positive Security Features

  • Standard Android platform security libraries are used for data handling.

Areas for Improvement

  • Data stored on the device could be better protected to reduce exposure if the device is lost or accessed by someone else.
  • The volume of behavioral data shared with advertising and attribution services could be reduced.
  • Options to control or opt out of third-party data collection within the app are limited.

About This Analysis

This scorecard reflects findings from automated static analysis of the app binary and configuration. Results are based on code observable at the time of the scan and may not reflect server-side behavior or recent updates.

App Details

  • App: Reddit
  • Package: com.reddit.frontpage
  • Version: 2025.46.0 (Build 2546031)
  • Scan Date: 2026-01-20

Versions & scan history

ScanDateOverall score
#3 (current) 75/100
#2 42/100
#1 75/100