CITT

    Scan results

    Rocket Money - Bills & Budgets

    Android

    Rocket Money (formerly Truebill) is an all-in-one personal finance app that helps users track subscriptions, lower bills, budget spending, manage net worth, and optimize savings. Over 10 million downloads with 4.5-star rating.

    CITT SCORE
    62
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Tracking spending and managing bills in one place

    Not For: You prefer your financial data not shared with ad networks

    What It Means For You

    Financial activity, spending habits, and linked account data are shared with multiple analytics and advertising services including Google Ads, Segment, and Singular. Eight analytics and marketing tools run alongside budgeting data, meaning user behavior inside the app informs ad targeting. Network communication has a critical-level finding that could affect how securely data travels.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (17)

    Data Security

    4 total
    4 Medium

    Network Security

    3 total
    1 Critical
    1 Medium
    1 Info

    Code Security

    2 total
    1 Low
    1 Info

    Privacy

    5 total
    1 High
    3 Medium
    1 Low

    Third-Party Risk

    3 total
    1 Medium
    2 Low

    Third-Party Services

    Firebase Analytics, Braze, Intercom, Sentry, Datadog RUM, Singular, Segment, Google Ads, Plaid Link, Stripe, Google Play Billing

    Security Strengths

    • ✓Respects Limit Ad Tracking preference
    • ✓WebView secure defaults enabled
    • ✓SSL errors correctly rejected in WebViews
    • ✓HTTPS enforced via network security config
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    analytics
    marketing
    ads

    Package

    com.truebill

    Version

    13.3.0 (Build 12349)

    Analysis Date

    Mar 26, 2026

    Classes Analyzed

    34,696

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (4 medium)

    Network Security - 3 findings (1 critical, 1 medium, 1 info)

    Code Safety - 0 findings

    Privacy - 5 findings (1 high, 3 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    Rocket Money collects financial activity, account balances, spending patterns, and behavioral data generated while users use the app. This includes data from linked bank and credit card accounts through Plaid.

    Third-Party Data Sharing

    User data is shared with the following services:

    • Firebase Analytics - Usage and behavioral tracking
    • Braze - Customer engagement and messaging
    • Intercom - In-app support and communication
    • Sentry - Error and performance monitoring
    • Datadog RUM - Real-user monitoring
    • Singular - Marketing attribution
    • Segment - Data routing to multiple destinations
    • Google Ads - Advertising targeting
    • Plaid Link - Financial account connectivity
    • Stripe - Payment processing
    • Google Play Billing - In-app purchase management

    Understanding the Scores

    CategoryScore
    Security60/100
    Privacy66/100
    Data Security58/100
    Network Security60/100
    Code Safety99/100
    Data Collection72/100
    Data Sharing82/100
    User Control78/100

    Positive Security Features

    • The app's internal code structure follows strong safety practices, scoring 99 out of 100 in code safety.

    Areas for Improvement

    • Financial behavioral data is shared with multiple advertising and analytics services. Offering a clear opt-out or reducing this sharing would better protect user privacy.
    • Network communication has a critical-level finding. Stronger protections for data in transit would reduce risk to financial information.
    • The number of third-party services with access to user data is high for a financial app. Limiting access to only services essential for core functionality would meaningfully improve privacy.

    About This Analysis

    This scorecard reflects automated static analysis of the published app binary and may change as the app updates.

    App Details

    • App Name: Rocket Money - Bills & Budgets
    • Package ID: com.truebill
    • Version: 13.3.0 (Build 12349)
    • Platform: Android
    • Analysis Date: March 26, 2026
    • Total Findings: 17 (1 critical, 1 high, 9 medium, 4 low, 2 info)

    Right of Reply

    Developer not yet contacted