MedKid Security & Privacy Scorecard
Android
Usage activity and crash data are reported to Sentry and Firebase, but personal data is not shared with advertising companies. Local data storage does not meet current best practices, which warrants caution if the app is used on a shared device.
Best for
Medical reference lookups without account sign-in
Findings
- 1 critical
- 0 high
- 3 medium
- 0 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Unencrypted Medical Records Database
- Unvalidated URL Loading in WebView
- Overly Permissive FileProvider Paths
Top privacy issues
- Unencrypted Medical Records Database
- Deep Link Parameter Validation Missing
- On-Device ML Kit Text Recognition (Positive Finding)
Full analysis
MedKid
What This Means for You
Usage activity and crash data are reported to Sentry and Firebase, but personal data is not shared with advertising companies. Local data storage does not meet current best practices, which warrants caution if the app is used on a shared device.
Recommendation: Use With Caution
Best For: Medical reference lookups without account sign-in
Key Findings
Data Security - 2 findings (1 critical, 1 medium)
Network Security - 1 finding (1 medium)
Code Safety - 0 findings
Privacy - 1 finding (1 info)
Privacy Concerns
What Data is Collected
MedKid collects usage activity and crash diagnostics through Sentry and Firebase. No account registration is required, so user names, email addresses, or other personal identifiers are not collected during normal use. Google ML Kit and Google Play Services provide on-device functionality and do not send personal information to external servers.
Third-Party Data Sharing
Usage activity and crash reports are shared with Sentry for error monitoring and Firebase for analytics. None of the third-party services used by this app receive user data for advertising or marketing purposes.
Understanding the Scores
- Security: 58/100
- Privacy: 62/100
- Data Security: 48/100
- Network Security: 92/100
- Code Safety: 94/100
- Data Collection: 100/100
- Data Sharing: 100/100
- User Control: 100/100
Positive Security Features
- No account or login required, which keeps the amount of personal information the app can collect to a minimum
- Network communications are well-protected, keeping data safe as it travels between the device and external services
- The app's code reflects careful, safety-conscious development practices
Areas for Improvement
- The way data is saved locally on the device falls short of current best practices and warrants caution if the app is used on a shared device or in a professional setting.
- One network connection uses a configuration that falls short of current best practices, though overall communication security remains strong.
- Addressing local data storage protections would significantly raise the overall safety profile of this app.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Results reflect the app's security and privacy posture at the time of the scan.
App Details
- App: MedKid
- Package ID: eu.codepublishing.emaluch
- Version: 1.12.0 (build 134)
- Scan Date: March 5, 2026
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 60/100 |