'%3e%3cpath%20d='M138%2095.6436V147H0V0H138V51.3564H59.3526V95.6436H138Z'%20fill='white'/%3e%3cpath%20d='M208%200V147H150V0H208Z'%20fill='white'/%3e%3cpath%20d='M361%200V51.4292H321.377V147H261.731V51.4292H220V0H361Z'%20fill='white'/%3e%3cpath%20d='M512%200V51.4292H472.939V147H414.139V51.4292H373V0H512Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_1_12'%3e%3crect%20width='512'%20height='147'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Scan results
Javeriana Cali
AndroidOfficial app from Pontificia Universidad Javeriana Cali for students and staff to access campus services and information. Provides agile navigation with modern interface for managing day-to-day university operations and campus interactions.
Quick Verdict
Best for: Javeriana Cali students and staff
What It Means For You
Data is handled with limited protection in some areas, meaning information submitted through the app may not be fully secured. Microsoft Azure AD and Google Play Services have access to certain activity data. Privacy controls are strong, and user data is not broadly shared with advertising or marketing companies.
Quick Verdict
Best for: Javeriana Cali students and staff
What It Means For You
Data is handled with limited protection in some areas, meaning information submitted through the app may not be fully secured. Microsoft Azure AD and Google Play Services have access to certain activity data. Privacy controls are strong, and user data is not broadly shared with advertising or marketing companies.
Method and Limitations
Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.
Findings (10)
Data Security
3 totalNetwork Security
2 totalCode Security
3 totalPrivacy
1 totalThird-Party Risk
1 totalThird-Party Services
Security Strengths
- ✓Secure OAuth parameter generation using SecureRandom
- ✓No WebView RCE attack surface (uses Chrome Custom Tabs)
- ✓Parameterized SQL queries prevent SQL injection
- ✓No third-party analytics SDKs
- ✓Biometric authentication uses Android Keystore
Version diff is on the Developer plan. See developer plans.
Context Tags
Package
edu.co.javerianacali
Version
1.1.0
Analysis Date
Feb 6, 2026
Was this analysis helpful?
Feedback helps us improve our analysis
Recommendation: Use With Caution
Key Findings
Data Security - 3 findings (2 critical, 1 medium)
Network Security - 2 findings (2 high)
Code Safety - 0 findings
Privacy - 1 finding (1 medium)
Privacy Concerns
What Data is Collected
The app collects activity and account data associated with user activity on Javeriana Cali services. The data collection scope is focused, with a Data Collection score of 85/100, indicating that only a limited set of information is gathered in connection with app usage.
Third-Party Data Sharing
Activity data is accessible to the following third-party services:
- Microsoft Azure AD - Identity and access management
- Google Play Services - Core platform integration
User information is not shared with advertising or marketing companies.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 82/100 |
| Data Security | 35/100 |
| Network Security | 65/100 |
| Code Safety | 70/100 |
| Data Collection | 85/100 |
| Data Sharing | 95/100 |
| User Control | 90/100 |
Positive Security Features
- Data sharing is tightly controlled, with a Data Sharing score of 95/100, meaning user information is not broadly distributed to outside parties.
- Users retain strong control over their data, reflected in a User Control score of 90/100.
- The app limits the collection of personal information to what is relevant to its function.
Areas for Improvement
- Data protection practices in some parts of the app need strengthening so that information submitted is more reliably secured before storage and transmission.
- Network communication practices could be improved to better protect user data as it travels between the app and external services.
- Additional code-level safeguards would further protect the app and the information it handles from misuse.
About This Analysis
This scorecard is based on automated static analysis of the app at the time of the scan. Scores reflect the state of the app as of the scan date.
App Details
| Field | Value |
|---|---|
| App Name | Javeriana Cali |
| Package ID | edu.co.javerianacali |
| Version | 1.1.0 |
| Scan Date | 2026-02-06 |
Right of Reply
Developer not yet contacted