CITT

    Scan results

    Octopus Electroverse

    Android

    Octopus Electroverse is the UK & Europe's largest EV charging network app, providing access to over 1,000,000 chargers. Features include real-time charger availability, Plunge Pricing discounts, route planning, and payment options via debit card or Google Pay.

    CITT SCORE
    68
    out of 100
    TRUSTish

    Quick Verdict

    Best for: EV drivers comfortable with standard analytics

    What It Means For You

    Usage patterns and in-app behavior are tracked by Amplitude for analytics. Payment data passes through Stripe, and account activity may be visible to Intercom for customer support. Crash reports and app diagnostics are shared with Sentry and Firebase.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (9)

    Data Security

    3 total
    1 High
    2 Medium

    Network Security

    1 total
    1 High

    Code Security

    2 total
    2 Medium

    Privacy

    2 total
    2 High

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Stripe, Intercom, Amplitude, Sentry, Mapbox, OneSignal, Firebase, Google Play Services

    Security Strengths

    • ✓JWT tokens encrypted with AES-256-GCM and hardware-backed Android Keystore
    • ✓Production build properly configured with debuggable flag disabled
    • ✓Modern SDK versions with no known CVEs
    • ✓Firebase Analytics completely disabled
    • ✓Proper backup exclusion protecting encrypted storage from ADB extraction
    • ✓Payment processing isolated via Stripe SDK with no local card storage
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    location
    financial
    sensitive data
    ads

    Package

    energy.octopus.electricjuice.android

    Version

    2025.32.0 (Build 1014)

    Analysis Date

    Feb 1, 2026

    Classes Analyzed

    22,127

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (1 high, 2 medium)

    Network Security - 1 finding (1 high)

    Code Safety - 0 findings

    Privacy - 2 findings (2 high)

    Privacy Concerns

    What Data is Collected

    Location is used to show nearby charging points via Mapbox. Amplitude collects data about how the app is used, including which features are interacted with and when. Device information and error reports are collected by Firebase and Sentry. Payment details are processed by Stripe.

    Third-Party Data Sharing

    App data is shared with the following services:

    • Amplitude - behavioral analytics and in-app usage tracking
    • Stripe - payment processing
    • Intercom - customer support, with visibility into account activity
    • Sentry - crash reports and app diagnostics
    • Firebase - diagnostics and push notification delivery
    • Mapbox - location-based mapping for charging station discovery
    • OneSignal - push notifications
    • Google Play Services - standard Android platform services

    Understanding the Scores

    CategoryScore
    Security72/100
    Privacy65/100
    Data Security68/100
    Network Security75/100
    Code Safety82/100
    Data Collection62/100
    Data Sharing70/100
    User Control58/100

    Positive Security Features

    • No notable positive security practices were identified for this app.

    Areas for Improvement

    • Some data stored on the device is not protected as strongly as it could be, which may allow other apps or someone with physical access to the device to read it.
    • Connections to certain services could benefit from stronger transport protections to keep data private while in transit.
    • The app offers limited controls over data collection, making it difficult to restrict how user information is used by third-party services.

    About This Analysis

    Scores and findings are based on automated static analysis of the app binary and code.

    App Details

    • App: Octopus Electroverse
    • Package: energy.octopus.electricjuice.android
    • Version: 2025.32.0 (Build 1014)
    • Scan Date: 2026-02-01
    • Platform: Android

    Right of Reply

    Developer not yet contacted