Salesforce Events Security & Privacy Scorecard
Android
User activity is tracked by multiple analytics and marketing services, including Segment, Firebase, and Mixpanel. Data may be shared across several third-party platforms. User controls over what is collected or retained are limited.
Best for
Salesforce conference attendees who expect standard
Findings
- 3 critical
- 5 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Hardcoded Database Encryption Key
- OAuth Tokens Stored in Plaintext
- JavaScript Interface in OAuth Dialog
Top privacy issues
- Third-Party Data Sharing Without Transparency
- Precise Location Tracking with Background Access
- Extensive Behavioral Tracking Without Granular Controls
Full analysis
Salesforce Events
Developer: Salesforce
Version: 16.0.0
Platform: Android
What This Means for You
User activity is tracked by multiple analytics and marketing services, including Segment, Firebase, and Mixpanel. Data may be shared across several third-party platforms. User controls over what is collected or retained are limited.
Recommendation: Use With Caution
Best For: Salesforce conference attendees who expect standard
Key Findings
Data Security - 4 findings (2 critical, 2 medium)
Network Security - 3 findings (2 high, 1 low)
Code Safety - 0 findings
Privacy - 7 findings (4 high, 2 medium, 1 low)
Privacy Concerns
What Data is Collected
Behavioral patterns, location signals, device identifiers, and usage history are collected by multiple services built into the app. Segment Analytics, Firebase, Gimbal, and Urban Airship each receive portions of this information.
Third-Party Data Sharing
Data is shared with Urban Airship (push targeting), Gimbal (location-based services), Segment Analytics (behavioral data routing), Firebase (analytics and crash reporting), Sentry (error monitoring), Okta (authentication), and Google Play Services. Each of these services receives data about how users interact with the app.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 42/100 |
| Privacy | 48/100 |
| Data Security | 35/100 |
| Network Security | 55/100 |
| Code Safety | 52/100 |
| Data Collection | 45/100 |
| Data Sharing | 40/100 |
| User Control | 35/100 |
Positive Security Features
- No standout privacy or security practices were identified in this version of the app.
Areas for Improvement
- Data is routed to a large number of third-party services, reducing transparency about where user information ends up.
- The app offers limited ability for users to control or opt out of data collection and behavioral tracking.
- Data handling practices, particularly around how sensitive information is stored and transmitted, have meaningful room for improvement.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect security and privacy practices observed at the time of the scan.
App Details
| App | Salesforce Events |
| Package ID | com.salesforce.dreamforce |
| Version | 16.0.0 |
| Scan Date | 2026-02-04 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 45/100 |