Sage Self Service Security & Privacy Scorecard
Android
Data stays largely within the app with minimal sharing to outside parties. A small set of standard libraries handles user information, and no advertising or marketing trackers were detected. Workplace data, including payroll and HR details, is not being passed to third-party ad networks.
Best for
Employees managing HR and payroll on the go
Findings
- 0 critical
- 2 high
- 3 medium
- 4 low
- 6 info
1 issue identified across security and privacy analysis.
Top security issues
- Cleartext HTTP Traffic Globally Permitted — app-wide HTTP allowed for all components including HR/payroll data paths
- ContentProvider Missing android:exported — HR document provider publicly accessible to any app on Android < 12
- AlwaysAcceptingHostnameVerifier Infrastructure Present — full TLS bypass infrastructure compiled into production APK
Top privacy issues
- READ_PHONE_STATE permission enables IMEI collection — non-resettable unique identifier, GDPR personal data concern
- ContentProvider Exposes Entire External Storage Root — any app can read photos, documents, and downloads on Android < 12
- No Analytics or Tracking SDKs — notable absence reduces data collection footprint for an HR app handling sensitive employee data
Full analysis
Developer: Sage
Version: 3.1.172 (build 172)
Platform: Android
Scan Date: April 7, 2026
Security Score: 75/100 | Privacy Score: 94/100
What This Means for You
Data stays largely within the app with minimal sharing to outside parties. A small set of standard libraries handles user information, and no advertising or marketing trackers were detected. Workplace data, including payroll and HR details, is not being passed to third-party ad networks.
Recommendation: Trustworthy
Best For: Employees managing HR and payroll on the go
Key Findings
Data Security - 4 findings (1 high, 2 medium, 1 info)
Network Security - 3 findings (1 high, 1 medium, 1 low)
Code Safety - 0 findings
Privacy - 2 findings (1 low, 1 info)
Privacy Concerns
What Data is Collected
Employment details, payroll figures, and HR records are processed locally within the app. Camera access supports document capture and QR code scanning for time-and-attendance and identity verification workflows. Usage data serves the app's core operational functions, including authentication and payroll display.
Third-Party Data Sharing
User information is handled by a limited set of utility libraries covering image display, local data storage, and layout rendering. These components serve functional purposes only. HR and payroll data is not routed to advertising networks, data brokers, or third-party analytics platforms.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 75/100 |
| Privacy | 94/100 |
| Data Security | 74/100 |
| Network Security | 70/100 |
| Code Safety | 94/100 |
| Data Collection | 96/100 |
| Data Sharing | 100/100 |
| User Control | 95/100 |
Positive Security Features
- Biometric authentication protects access to the account and sensitive payroll information
- Encrypted local storage keeps HR data secured on the device
- A dedicated data protection library (Google Tink) is used to safeguard data operations
- HR and payroll data is handled exclusively by the app's core functions, with no routing to advertising or tracking ecosystems
Areas for Improvement
- Some network connections could use stronger protections to better secure data as it travels between the device and company servers.
- Local data storage settings could be further hardened to reduce exposure on shared or lost devices.
- A small number of configuration patterns follow older practices that would benefit from modernization to align with current standards.
About This Analysis
Static analysis of the app's code and configuration was used to identify security and privacy characteristics. This scorecard reflects the state of the app at the time of the scan.
App Details
- Package: com.sage.mobileess
- Version: 3.1.172 (build 172)
- Scan Date: April 7, 2026
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 81/100 |