CITT

    Scan results

    Salesforce Events

    Android

    Get the most out of your Salesforce event experience. Use this app to create your perfect schedule, set up onsite connections, and get important event information. Used at all major Salesforce events, including TDX, Education Summit, Tableau Conference, Connections, Dreamforce and World Tours.

    CITT SCORE
    45
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Salesforce conference attendees who expect standard

    What It Means For You

    User activity is tracked by multiple analytics and marketing services, including Segment, Firebase, and Mixpanel. Data may be shared across several third-party platforms. User controls over what is collected or retained are limited.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (21)

    Data Security

    4 total
    2 Critical
    2 Medium

    Network Security

    3 total
    2 High
    1 Low

    Code Security

    4 total
    1 Critical
    1 High
    2 Medium

    Privacy

    7 total
    4 High
    2 Medium
    1 Low

    Third-Party Risk

    2 total
    2 High

    Permission Usage

    1 total
    1 Medium

    Third-Party Services

    Urban Airship, Gimbal, Segment Analytics, Sentry, Firebase, Okta, Google Play Services, SQLCipher, RootBeer, Mixhalo

    Security Strengths

    • ✓SQLCipher database encryption with AES-256
    • ✓Android Keystore integration for key storage
    • ✓SSL certificate pinning for Eventbase domains
    • ✓OAuth 2.0 with PKCE implementation
    • ✓Modern SDK targeting (Android 14)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    enterprise
    events
    location
    sensitive data
    social
    camera
    ads
    financial

    Package

    com.salesforce.dreamforce

    Version

    16.0.0

    Analysis Date

    Feb 4, 2026

    Classes Analyzed

    20,749

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (2 critical, 2 medium)

    Network Security - 3 findings (2 high, 1 low)

    Code Safety - 0 findings

    Privacy - 7 findings (4 high, 2 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    Behavioral patterns, location signals, device identifiers, and usage history are collected by multiple services built into the app. Segment Analytics, Firebase, Gimbal, and Urban Airship each receive portions of this information.

    Third-Party Data Sharing

    Data is shared with Urban Airship (push targeting), Gimbal (location-based services), Segment Analytics (behavioral data routing), Firebase (analytics and crash reporting), Sentry (error monitoring), Okta (authentication), and Google Play Services. Each of these services receives data about how users interact with the app.

    Understanding the Scores

    CategoryScore
    Security42/100
    Privacy48/100
    Data Security35/100
    Network Security55/100
    Code Safety52/100
    Data Collection45/100
    Data Sharing40/100
    User Control35/100

    Positive Security Features

    • No standout privacy or security practices were identified in this version of the app.

    Areas for Improvement

    • Data is routed to a large number of third-party services, reducing transparency about where user information ends up.
    • The app offers limited ability for users to control or opt out of data collection and behavioral tracking.
    • Data handling practices, particularly around how sensitive information is stored and transmitted, have meaningful room for improvement.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect security and privacy practices observed at the time of the scan.

    App Details

    AppSalesforce Events
    Package IDcom.salesforce.dreamforce
    Version16.0.0
    Scan Date2026-02-04

    Right of Reply

    Developer not yet contacted