CITT

    Scan results

    Visit A City

    Android

    Visit A City - The ultimate travel app for planning your city sightseeing trip. Create customized itineraries, book tours and activities, discover landmarks and hidden gems with comprehensive guides, and find the best experiences to suit your interests.

    CITT SCORE
    52
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: City explorers comfortable with ad and analytics tracking

    What It Means For You

    User activity is tracked by Facebook, AppsFlyer, and Google Analytics, and usage patterns are shared with advertising and attribution networks. Firebase and Sentry collect crash and behavior data in the background. User data is held with below-average protections, so sensitive personal information is better kept off this app.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (22)

    Data Security

    3 total
    3 Critical

    Network Security

    3 total
    1 Critical
    1 High
    1 Medium

    Code Security

    8 total
    1 Critical
    3 High
    3 Medium
    1 Low

    Privacy

    7 total
    7 Medium

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Firebase, Facebook SDK, AppsFlyer, Google Maps SDK, Sentry, Google Analytics, Syncfusion PDF Viewer

    Security Strengths

    • ✓AES-256-GCM encryption with Android Keystore
    • ✓Firebase App Check for bot protection
    • ✓Play Integrity API for device attestation
    • ✓OAuth 2.0 authentication flows
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    location
    social
    sensitive data
    ads
    financial

    Package

    com.visitacity.visitacityapp

    Version

    4.1.103 (Build 400310300)

    Analysis Date

    Dec 17, 2025

    Classes Analyzed

    10,799

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (3 critical)

    Network Security - 3 findings (1 critical, 1 high, 1 medium)

    Code Safety - 0 findings

    Privacy - 7 findings (7 medium)

    Privacy Concerns

    What Data is Collected

    Visit A City collects behavioral and usage data through multiple services running in the background. Firebase records crash reports and session activity. Facebook SDK and Google Analytics monitor how users navigate and interact with features throughout the app.

    Third-Party Data Sharing

    User data is shared with the following third parties:

    • Facebook SDK - behavioral and advertising data
    • AppsFlyer - attribution and marketing analytics
    • Google Analytics - usage and engagement tracking
    • Firebase - crash reporting and performance data
    • Sentry - error and diagnostic reporting
    • Google Maps SDK - location data for map functionality
    • Syncfusion PDF Viewer - document rendering support

    Understanding the Scores

    CategoryScore
    Security48/100
    Privacy58/100
    Data Security35/100
    Network Security62/100
    Code Safety55/100
    Data Collection62/100
    Data Sharing65/100
    User Control50/100

    Positive Security Features

    • No positive security practices were identified for this app.

    Areas for Improvement

    • Strengthen how personal data is protected within the app to reduce the risk of exposure if the device is accessed by others.
    • Reduce reliance on multiple advertising and attribution tracking services to limit how broadly user data is distributed across third parties.
    • Provide clearer user controls over data collection and sharing so users can make informed choices about their privacy.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the security and privacy posture observed at the time of scanning.

    App Details

    • App Name: Visit A City
    • Package ID: com.visitacity.visitacityapp
    • Version: 4.1.103 (Build 400310300)
    • Scan Date: 2025-12-17
    • Platform: Android

    Right of Reply

    Developer not yet contacted