CITT

    Scan results

    Snapchat

    Android

    Snapchat is a fast and fun way to share moments with friends and family. Features include camera-first messaging, stories, group video chat, location sharing on the Snap Map, and content discovery through Spotlight and community stories.

    CITT SCORE
    38
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Teens and young adults comfortable with broad data sharing

    What It Means For You

    User activity, location, and device identifiers are shared with Firebase, Google, Facebook, and Mapbox among others. Behavioral patterns are used to build an advertising profile tied to the user's Google Advertising ID. Payment transactions run through Braintree and Razorpay, adding third parties to the user's financial activity.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (28)

    Data Security

    12 total
    4 Critical
    1 High
    7 Medium

    Network Security

    3 total
    1 High
    2 Medium

    Code Security

    5 total
    1 Critical
    1 High
    3 Low

    Privacy

    6 total
    1 Critical
    4 High
    1 Medium

    Third-Party Risk

    2 total
    1 High
    1 Low

    Third-Party Services

    Firebase Analytics, Google Advertising ID, Mapbox Telemetry, Braintree Payment, Razorpay Payment, Facebook Fresco, Amazon Login with Amazon, AI Factory SDK, Looksery AR SDK, Shazam SDK

    Security Strengths

    • ✓Excellent SSL/TLS error handling (no certificate validation bypass)
    • ✓Strong WebView file access controls (15/21 implementations secure)
    • ✓Proper BuildConfig security hygiene (no hardcoded secrets)
    • ✓Multiple encryption protocols for message content (EEL/KRAKEN/FIDELIUS)
    • ✓WebView debugging disabled in production
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    camera
    location
    contacts
    sensitive data
    ads
    financial
    biometric

    Package

    com.snapchat.android

    Version

    13.77.0.52

    Analysis Date

    Jan 31, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 12 findings (4 critical, 1 high, 7 medium)

    Network Security - 3 findings (1 high, 2 medium)

    Code Safety - 0 findings

    Privacy - 6 findings (1 critical, 4 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    Snapchat collects user location data, device identifiers, behavioral patterns, and in-app activity. This includes details about the content users engage with, who they communicate with, and technical information about the device.

    Third-Party Data Sharing

    User data is shared with Firebase Analytics, Google (via Advertising ID), Facebook, and Mapbox Telemetry for location-based features. Payment processing involves Braintree and Razorpay. Additional integrations include Amazon Login with Amazon, AI Factory SDK, Looksery AR SDK, and Shazam SDK, each receiving a portion of user usage data.

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy42/100
    Data Security30/100
    Network Security78/100
    Code Safety45/100
    Data Collection48/100
    Data Sharing55/100
    User Control40/100

    Positive Security Features

    • None identified in this analysis.

    Areas for Improvement

    • Sensitive data stored on the device may be accessible if the phone is lost or accessed by someone else, putting personal messages and media at risk.
    • Behavioral data and device identity are shared across a wide network of advertising and analytics companies, leaving users with limited ability to control how that information is used.
    • Payment activity is routed through multiple third-party processors, broadening the number of companies with access to user financial transactions.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the security and privacy posture of the version analyzed and may not reflect subsequent updates.

    App Details

    • App: Snapchat
    • Package: com.snapchat.android
    • Version: 13.77.0.52
    • Scan Date: 2026-01-31

    Right of Reply

    Developer not yet contacted