Rocket Money - Bills & Budgets Security & Privacy Scorecard
Android
Financial activity, spending habits, and linked account data are shared with multiple analytics and advertising services including Google Ads, Segment, and Singular. Eight analytics and marketing tools run alongside budgeting data, meaning user behavior inside the app informs ad targeting. Network communication has a critical-level finding that could affect how securely data travels.
Best for
Tracking spending and managing bills in one place
Avoid if
You prefer your financial data not shared with ad networks
Findings
- 1 critical
- 1 high
- 9 medium
- 4 low
- 2 info
17 issues identified across security and privacy analysis.
Top security issues
- SSL/TLS Certificate Validation Bypass in ReactNativeBlobUtil
- Unencrypted Primary Data Storage (AsyncStorage)
- Backup Enabled for Financial App
Top privacy issues
- Pre-Consent Analytics Initialization
- Excessive PII Collection in Braze Marketing SDK
- Excessive Analytics/Tracking (8+ SDKs)
Full analysis
Rocket Money - Bills & Budgets
com.truebill | Version 13.3.0 | March 26, 2026
What This Means for You
Financial activity, spending habits, and linked account data are shared with multiple analytics and advertising services including Google Ads, Segment, and Singular. Eight analytics and marketing tools run alongside budgeting data, meaning user behavior inside the app informs ad targeting. Network communication has a critical-level finding that could affect how securely data travels.
Recommendation: Use With Caution
Best For: Tracking spending and managing bills in one place
Avoid If: You prefer financial data not shared with ad networks
Key Findings
Data Security - 4 findings (4 medium)
Network Security - 3 findings (1 critical, 1 medium, 1 info)
Code Safety - 0 findings
Privacy - 5 findings (1 high, 3 medium, 1 low)
Privacy Concerns
What Data is Collected
Rocket Money collects financial activity, account balances, spending patterns, and behavioral data generated while users use the app. This includes data from linked bank and credit card accounts through Plaid.
Third-Party Data Sharing
User data is shared with the following services:
- Firebase Analytics - Usage and behavioral tracking
- Braze - Customer engagement and messaging
- Intercom - In-app support and communication
- Sentry - Error and performance monitoring
- Datadog RUM - Real-user monitoring
- Singular - Marketing attribution
- Segment - Data routing to multiple destinations
- Google Ads - Advertising targeting
- Plaid Link - Financial account connectivity
- Stripe - Payment processing
- Google Play Billing - In-app purchase management
Understanding the Scores
| Category | Score |
|---|---|
| Security | 60/100 |
| Privacy | 66/100 |
| Data Security | 58/100 |
| Network Security | 60/100 |
| Code Safety | 99/100 |
| Data Collection | 72/100 |
| Data Sharing | 82/100 |
| User Control | 78/100 |
Positive Security Features
- The app's internal code structure follows strong safety practices, scoring 99 out of 100 in code safety.
Areas for Improvement
- Financial behavioral data is shared with multiple advertising and analytics services. Offering a clear opt-out or reducing this sharing would better protect user privacy.
- Network communication has a critical-level finding. Stronger protections for data in transit would reduce risk to financial information.
- The number of third-party services with access to user data is high for a financial app. Limiting access to only services essential for core functionality would meaningfully improve privacy.
About This Analysis
This scorecard reflects automated static analysis of the published app binary and may change as the app updates.
App Details
- App Name: Rocket Money - Bills & Budgets
- Package ID: com.truebill
- Version: 13.3.0 (Build 12349)
- Platform: Android
- Analysis Date: March 26, 2026
- Total Findings: 17 (1 critical, 1 high, 9 medium, 4 low, 2 info)
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 62/100 |