Octopus Electroverse Security & Privacy Scorecard
Android
Usage patterns and in-app behavior are tracked by Amplitude for analytics. Payment data passes through Stripe, and account activity may be visible to Intercom for customer support. Crash reports and app diagnostics are shared with Sentry and Firebase.
Best for
EV drivers comfortable with standard analytics
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Intercom SDK WebView Mixed Content Vulnerability
- Unencrypted GraphQL Cache Exposes Sensitive User Data
- Third-Party API Keys Exposed in APK
Top privacy issues
- GDPR Non-Compliance - No Analytics Consent
- Sentry Session Replay PII Exposure
- Mapbox Token Restrictions Not Verified
Full analysis
Octopus Electroverse
Overall Security: 72/100 | Privacy: 65/100
Version: 2025.32.0 (Build 1014) | Analyzed: 2026-02-01
What This Means for You
Usage patterns and in-app behavior are tracked by Amplitude for analytics. Payment data passes through Stripe, and account activity may be visible to Intercom for customer support. Crash reports and app diagnostics are shared with Sentry and Firebase.
Recommendation: Use With Caution
Best For: EV drivers comfortable with standard analytics
Key Findings
Data Security - 3 findings (1 high, 2 medium)
Network Security - 1 finding (1 high)
Code Safety - 0 findings
Privacy - 2 findings (2 high)
Privacy Concerns
What Data is Collected
Location is used to show nearby charging points via Mapbox. Amplitude collects data about how the app is used, including which features are interacted with and when. Device information and error reports are collected by Firebase and Sentry. Payment details are processed by Stripe.
Third-Party Data Sharing
App data is shared with the following services:
- Amplitude - behavioral analytics and in-app usage tracking
- Stripe - payment processing
- Intercom - customer support, with visibility into account activity
- Sentry - crash reports and app diagnostics
- Firebase - diagnostics and push notification delivery
- Mapbox - location-based mapping for charging station discovery
- OneSignal - push notifications
- Google Play Services - standard Android platform services
Understanding the Scores
| Category | Score |
|---|---|
| Security | 72/100 |
| Privacy | 65/100 |
| Data Security | 68/100 |
| Network Security | 75/100 |
| Code Safety | 82/100 |
| Data Collection | 62/100 |
| Data Sharing | 70/100 |
| User Control | 58/100 |
Positive Security Features
- No notable positive security practices were identified for this app.
Areas for Improvement
- Some data stored on the device is not protected as strongly as it could be, which may allow other apps or someone with physical access to the device to read it.
- Connections to certain services could benefit from stronger transport protections to keep data private while in transit.
- The app offers limited controls over data collection, making it difficult to restrict how user information is used by third-party services.
About This Analysis
Scores and findings are based on automated static analysis of the app binary and code.
App Details
- App: Octopus Electroverse
- Package: energy.octopus.electricjuice.android
- Version: 2025.32.0 (Build 1014)
- Scan Date: 2026-02-01
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 68/100 |