Snapchat Security & Privacy Scorecard
Android
User activity, location, and device identifiers are shared with Firebase, Google, Facebook, and Mapbox among others. Behavioral patterns are used to build an advertising profile tied to the user's Google Advertising ID. Payment transactions run through Braintree and Razorpay, adding third parties to the user's financial activity.
Best for
Teens and young adults comfortable with broad data sharing
Findings
- 6 critical
- 8 high
- 10 medium
- 4 low
- 0 info
1 issue identified across security and privacy analysis.
Top security issues
- Razorpay JavaScript Interface Exposes Intent Launching (RCE Vector)
- Android Backup Enabled Without Exclusion Rules (Data Extraction)
- Facebook Fresco Library - CVE-2023-4863 (libwebp Heap Buffer Overflow)
Top privacy issues
- Spectacles Database Contains Unencrypted PII (Geolocation)
- Extensive Analytics with No Visible Opt-Out
- Google Advertising ID Collection Without Consent
Full analysis
Snapchat
What This Means for You
User activity, location, and device identifiers are shared with Firebase, Google, Facebook, and Mapbox among others. Behavioral patterns are used to build an advertising profile tied to the user's Google Advertising ID. Payment transactions run through Braintree and Razorpay, adding third parties to the user's financial activity.
Recommendation: Use With Caution
Best For: Teens and young adults comfortable with broad data sharing
Key Findings
Data Security - 12 findings (4 critical, 1 high, 7 medium)
Network Security - 3 findings (1 high, 2 medium)
Code Safety - 0 findings
Privacy - 6 findings (1 critical, 4 high, 1 medium)
Privacy Concerns
What Data is Collected
Snapchat collects user location data, device identifiers, behavioral patterns, and in-app activity. This includes details about the content users engage with, who they communicate with, and technical information about the device.
Third-Party Data Sharing
User data is shared with Firebase Analytics, Google (via Advertising ID), Facebook, and Mapbox Telemetry for location-based features. Payment processing involves Braintree and Razorpay. Additional integrations include Amazon Login with Amazon, AI Factory SDK, Looksery AR SDK, and Shazam SDK, each receiving a portion of user usage data.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 42/100 |
| Data Security | 30/100 |
| Network Security | 78/100 |
| Code Safety | 45/100 |
| Data Collection | 48/100 |
| Data Sharing | 55/100 |
| User Control | 40/100 |
Positive Security Features
- None identified in this analysis.
Areas for Improvement
- Sensitive data stored on the device may be accessible if the phone is lost or accessed by someone else, putting personal messages and media at risk.
- Behavioral data and device identity are shared across a wide network of advertising and analytics companies, leaving users with limited ability to control how that information is used.
- Payment activity is routed through multiple third-party processors, broadening the number of companies with access to user financial transactions.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the security and privacy posture of the version analyzed and may not reflect subsequent updates.
App Details
- App: Snapchat
- Package: com.snapchat.android
- Version: 13.77.0.52
- Scan Date: 2026-01-31
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 38/100 |