CITT

    Scan results

    Subastanet

    Android

    Subastanet is a livestock and agricultural supplies marketplace app that allows users to buy and sell livestock, supplies, and equipment for agricultural businesses. The app enables farmers and traders to conduct transactions from anywhere with support from SUBASTAR S.A.

    CITT SCORE
    18
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Users comfortable with Google analytics and data sharing

    Not For: You prefer apps that store data securely

    What It Means For You

    App activity is tracked by Firebase Analytics and shared with Google services. Location data is collected via Google Play Services. Data stored by the app may not be fully protected, putting personal information at higher risk.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (13)

    Data Security

    4 total
    2 Critical
    2 Medium

    Network Security

    1 total
    1 Critical

    Code Security

    3 total
    2 Critical
    1 High

    Privacy

    5 total
    5 Critical

    Third-Party Services

    Firebase Firestore, Firebase Realtime Database, Firebase Cloud Messaging, Firebase Analytics, Firebase Installations, Google Maps Android SDK, Google Play Services Location, InAppWebView
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    location
    camera
    sensitive data
    ads

    Package

    com.subastar.subastanet

    Version

    4.9.7

    Analysis Date

    Feb 6, 2026

    Classes Analyzed

    4,293

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Don't Trust

    Key Findings

    Data Security - 4 findings (2 critical, 2 medium)

    Network Security - 1 finding (1 critical)

    Code Safety - 0 findings

    Privacy - 5 findings (5 critical)

    Privacy Concerns

    What Data is Collected

    User location is collected and processed through Google Play Services Location. Firebase services gather device identifiers, usage patterns, and app interaction data. Cloud messaging services collect device-linked information to deliver notifications. Real-time database services sync in-app data through Google's infrastructure.

    Third-Party Data Sharing

    User data is shared with the following third-party services:

    • Firebase Analytics - Usage and behavioral data shared with Google
    • Firebase Firestore - App data stored in Google's cloud infrastructure
    • Firebase Realtime Database - Real-time data synced through Google's servers
    • Firebase Cloud Messaging - Push notifications routed through Google
    • Firebase Installations - Device identification registered with Google
    • Google Maps Android SDK - Location and mapping data processed by Google
    • Google Play Services Location - Precise location tracked via Google's services
    • InAppWebView - Embedded content display component that may expose browsing activity to third parties

    Understanding the Scores

    CategoryScore
    Security20/100
    Privacy15/100
    Data Security25/100
    Network Security30/100
    Code Safety25/100
    Data Collection20/100
    Data Sharing25/100
    User Control10/100

    Positive Security Features

    • No positive security features were identified in this version of the app.

    Areas for Improvement

    • The app should apply stronger protections to data stored on device to reduce the risk of unauthorized access to personal information.
    • Connections between the app and its servers should be secured so data is protected while it travels across the internet.
    • Users should be given clear, accessible controls over what personal data is gathered and which third parties receive it.

    About This Analysis

    This scorecard reflects findings from automated static analysis of the app's code and configuration. Results represent observed security and privacy practices at the time of the scan.

    App Details

    FieldValue
    App NameSubastanet
    Packagecom.subastar.subastanet
    Version4.9.7
    Developer-
    Scan Date2026-02-06

    Right of Reply

    Developer not yet contacted