CITT

    Scan results

    MedKid

    Android

    MedKid is a family medical organizer app for tracking children's health records with end-to-end encrypted sync, calendar views, medical journals, and appointment planning. Supports photos, audio recordings, and text search.

    CITT SCORE
    60
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Medical reference lookups without account sign-in

    What It Means For You

    Usage activity and crash data are reported to Sentry and Firebase, but personal data is not shared with advertising companies. Local data storage does not meet current best practices, which warrants caution if the app is used on a shared device.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (7)

    Data Security

    2 total
    1 Critical
    1 Medium

    Network Security

    1 total
    1 Medium

    Code Security

    2 total
    1 Medium
    1 Info

    Privacy

    1 total
    1 Info

    Third-Party Risk

    1 total
    1 Info

    Third-Party Services

    Sentry, Google ML Kit, Google Play Services, Firebase Core

    Security Strengths

    • ✓flutter_secure_storage with Android KeyStore for credential encryption
    • ✓Backup disabled (allowBackup=false)
    • ✓HTTPS enforced for all network traffic
    • ✓On-device ML processing for medical documents
    • ✓No hardcoded secrets or API keys
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    health
    sensitive data
    children
    medical
    camera
    PHI

    Package

    eu.codepublishing.emaluch

    Version

    1.12.0 (versionCode 134)

    Analysis Date

    Mar 5, 2026

    Classes Analyzed

    4,933

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (1 critical, 1 medium)

    Network Security - 1 finding (1 medium)

    Code Safety - 0 findings

    Privacy - 1 finding (1 info)

    Privacy Concerns

    What Data is Collected

    MedKid collects usage activity and crash diagnostics through Sentry and Firebase. No account registration is required, so user names, email addresses, or other personal identifiers are not collected during normal use. Google ML Kit and Google Play Services provide on-device functionality and do not send personal information to external servers.

    Third-Party Data Sharing

    Usage activity and crash reports are shared with Sentry for error monitoring and Firebase for analytics. None of the third-party services used by this app receive user data for advertising or marketing purposes.

    Understanding the Scores

    • Security: 58/100
    • Privacy: 62/100
    • Data Security: 48/100
    • Network Security: 92/100
    • Code Safety: 94/100
    • Data Collection: 100/100
    • Data Sharing: 100/100
    • User Control: 100/100

    Positive Security Features

    • No account or login required, which keeps the amount of personal information the app can collect to a minimum
    • Network communications are well-protected, keeping data safe as it travels between the device and external services
    • The app's code reflects careful, safety-conscious development practices

    Areas for Improvement

    • The way data is saved locally on the device falls short of current best practices and warrants caution if the app is used on a shared device or in a professional setting.
    • One network connection uses a configuration that falls short of current best practices, though overall communication security remains strong.
    • Addressing local data storage protections would significantly raise the overall safety profile of this app.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Results reflect the app's security and privacy posture at the time of the scan.

    App Details

    • App: MedKid
    • Package ID: eu.codepublishing.emaluch
    • Version: 1.12.0 (build 134)
    • Scan Date: March 5, 2026
    • Platform: Android

    Right of Reply

    Developer not yet contacted