Visit A City Security & Privacy Scorecard
Android
User activity is tracked by Facebook, AppsFlyer, and Google Analytics, and usage patterns are shared with advertising and attribution networks. Firebase and Sentry collect crash and behavior data in the background. User data is held with below-average protections, so sensitive personal information is better kept off this app.
Best for
City explorers comfortable with ad and analytics tracking
Findings
- 2 critical
- 1 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Facebook WebDialog SSL Error Acceptance
- Unencrypted SQLite Database Storage
- JavaScript Bridge Without Origin Validation
Top privacy issues
- Advertising ID Collection Without Consent
- Insecure Backup Configuration Exposes Sensitive Data
- Sentry Session Replay Captures PII
Full analysis
Visit A City
Package: com.visitacity.visitacityapp
Version: 4.1.103 (Build 400310300)
Scan Date: 2025-12-17
What This Means for You
User activity is tracked by Facebook, AppsFlyer, and Google Analytics, and usage patterns are shared with advertising and attribution networks. Firebase and Sentry collect crash and behavior data in the background. User data is held with below-average protections, so sensitive personal information is better kept off this app.
Recommendation: Use With Caution
Best For: City explorers comfortable with ad and analytics tracking
Key Findings
Data Security - 3 findings (3 critical)
Network Security - 3 findings (1 critical, 1 high, 1 medium)
Code Safety - 0 findings
Privacy - 7 findings (7 medium)
Privacy Concerns
What Data is Collected
Visit A City collects behavioral and usage data through multiple services running in the background. Firebase records crash reports and session activity. Facebook SDK and Google Analytics monitor how users navigate and interact with features throughout the app.
Third-Party Data Sharing
User data is shared with the following third parties:
- Facebook SDK - behavioral and advertising data
- AppsFlyer - attribution and marketing analytics
- Google Analytics - usage and engagement tracking
- Firebase - crash reporting and performance data
- Sentry - error and diagnostic reporting
- Google Maps SDK - location data for map functionality
- Syncfusion PDF Viewer - document rendering support
Understanding the Scores
| Category | Score |
|---|---|
| Security | 48/100 |
| Privacy | 58/100 |
| Data Security | 35/100 |
| Network Security | 62/100 |
| Code Safety | 55/100 |
| Data Collection | 62/100 |
| Data Sharing | 65/100 |
| User Control | 50/100 |
Positive Security Features
- No positive security practices were identified for this app.
Areas for Improvement
- Strengthen how personal data is protected within the app to reduce the risk of exposure if the device is accessed by others.
- Reduce reliance on multiple advertising and attribution tracking services to limit how broadly user data is distributed across third parties.
- Provide clearer user controls over data collection and sharing so users can make informed choices about their privacy.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the security and privacy posture observed at the time of scanning.
App Details
- App Name: Visit A City
- Package ID: com.visitacity.visitacityapp
- Version: 4.1.103 (Build 400310300)
- Scan Date: 2025-12-17
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 52/100 |