CITT

    Scan results

    Uber - Request a ride

    Android

    Join millions of riders who trust Uber for their everyday travel needs. Whether you're running errands across town or exploring new cities, Uber provides a range of ride options from affordable UberX to luxury Black cars, with upfront pricing and comprehensive safety features.

    CITT SCORE
    50
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Frequent riders comfortable with usage analytics

    What It Means For You

    Ride history, location, and usage patterns are collected and shared with Firebase Analytics and Braze to improve the service and target promotions. Payment processing relies on third-party providers who handle user card data. Precise location is tracked throughout trips and may be retained after the ride ends.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (21)

    Data Security

    6 total
    1 Critical
    1 High
    2 Medium
    2 Low

    Network Security

    3 total
    2 Critical
    1 High

    Code Security

    5 total
    1 High
    3 Medium
    1 Low

    Privacy

    4 total
    1 High
    3 Medium

    Third-Party Risk

    2 total
    1 High
    1 Medium

    Permission Usage

    1 total
    1 Medium

    Third-Party Services

    Firebase Analytics, Firebase Crashlytics, Firebase Performance, Firebase Sessions, Firebase Cloud Messaging, Adyen 3DS, Braintree, Card.io, OkHttp3, Retrofit2, RxJava2

    Security Strengths

    • ✓ProGuard/R8 code obfuscation implemented
    • ✓Certificate pinning implemented with 11 SHA-256 pins
    • ✓Android backup disabled (allowBackup=false)
    • ✓Production release build with debug disabled
    • ✓Play Integrity API for device attestation
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    location
    sensitive data
    ads
    camera
    contacts

    Package

    com.ubercab

    Version

    4.614.10002 (Build 262343)

    Analysis Date

    Jan 29, 2026

    Classes Analyzed

    156,699

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 6 findings (1 critical, 1 high, 2 medium, 2 low)

    Network Security - 3 findings (2 critical, 1 high)

    Code Safety - 0 findings

    Privacy - 4 findings (1 high, 3 medium)

    Privacy Concerns

    What Data is Collected

    Uber collects precise location throughout every trip, along with ride history, device identifiers, and app usage patterns. Payment details are handled by third-party processors. In-app behavior is monitored continuously to personalize the experience and serve targeted promotions.

    Third-Party Data Sharing

    User data is shared with multiple third-party services: Firebase Analytics and Firebase Performance receive usage and performance data, Braze receives behavioral data to target promotions, and Braintree and Adyen process payment information under their own data retention policies.

    Understanding the Scores

    CategoryScore
    Security45/100
    Privacy55/100
    Data Security40/100
    Network Security35/100
    Code Safety50/100
    Data Collection60/100
    Data Sharing60/100
    User Control50/100

    Positive Security Features

    No standout security practices were identified for this version of the app.

    Areas for Improvement

    • Location data and usage patterns are sent without full protection on public Wi-Fi, meaning user data may not be fully protected during transit.
    • Payment details flow through multiple third-party processors, each operating under their own data retention policies beyond Uber's direct control.
    • Precise location may be stored well after a trip ends, with limited options available for users to review or remove that data from third-party systems.

    About This Analysis

    App Details

    FieldValue
    AppUber - Request a ride
    Packagecom.ubercab
    Version4.614.10002 (Build 262343)
    Scan Date2026-01-29

    Right of Reply

    Developer not yet contacted