Yuka - Food & Cosmetic Scanner Security & Privacy Scorecard
Android
Scans, usage patterns, and account activity are shared with Firebase Analytics, Google, and Facebook. Crash reports and performance data are sent to Google automatically. Barcode scans and product interactions help personalize the experience but are processed by multiple third-party services.
Best for
Health-conscious shoppers comfortable with Google and
Findings
- 0 critical
- 0 high
- 1 medium
- 1 low
- 6 info
0 issues identified across security and privacy analysis.
Top security issues
- No URL Validation Before WebView Loading
- Account Deletion Deep Link Without Re-Authentication
- No SSL Error Handling in Primary WebView
Top privacy issues
- Crashlytics User ID Linking Enables User-Level Crash Tracking
- No Analytics Opt-Out Mechanism
- Crashlytics User ID Linking Enables User-Level Crash Tracking
Full analysis
Yuka - Food & Cosmetic Scanner
io.yuka.android | Version 4.54.1 (build 834) | Scanned 2026-01-30
Overall Security Score: 92/100 | Privacy Score: 88/100
What This Means for You
Scans, usage patterns, and account activity are shared with Firebase Analytics, Google, and Facebook. Crash reports and performance data are sent to Google automatically. Barcode scans and product interactions help personalize the experience but are processed by multiple third-party services.
Recommendation: Trustworthy
Best For: Health-conscious shoppers comfortable with Google and
Key Findings
Data Security - 1 finding (1 low)
Network Security - 1 finding (1 low)
Code Safety - 0 findings
Privacy - 2 findings (1 medium, 1 low)
Privacy Concerns
What Data is Collected
- Barcode scans and product lookups
- Account activity and app usage patterns
- Crash reports and performance diagnostics, sent to Google automatically
- Device identifiers and behavioral interaction data
Third-Party Data Sharing
- Firebase Analytics - usage and behavioral tracking
- Google Play Services and ML Kit - core app functions and crash reporting
- Facebook SDK - behavioral data, potentially used for advertising
- Algolia Search - product and ingredient search queries
- Scandit DataCapture SDK - barcode scanning processing
- Pairip License Protection - app license verification
Understanding the Scores
| Category | Score |
|---|---|
| Security | 92/100 |
| Privacy | 88/100 |
| Data Security | 98/100 |
| Network Security | 95/100 |
| Code Safety | 92/100 |
| Data Collection | 85/100 |
| Data Sharing | 100/100 |
| User Control | 80/100 |
Positive Security Features
- Network communications are well-protected, keeping user data secure in transit
- Data handling practices are strong, with high scores for how user information is stored and managed
- Third-party data sharing earned a perfect score, indicating controlled and transparent practices
- The app's code is built with careful security practices, reducing risk from software flaws
Areas for Improvement
- Behavioral data is shared with Facebook, which may be unexpected in a health-focused app. Reviewing the app's privacy settings can help clarify what sharing can be adjusted.
- User controls over data preferences are limited, leaving fewer options to manage background data collection by third-party services.
- Crash and performance data is sent to Google automatically in the background, with limited opportunity for users to adjust this behavior.
About This Analysis
This scorecard is based on static analysis of the app's code and data practices at the time of the scan. Scores reflect the app's behavior as observed during analysis.
App Details
- App Name: Yuka - Food & Cosmetic Scanner
- Package ID: io.yuka.android
- Version: 4.54.1 (build 834)
- Scan Date: 2026-01-30
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 90/100 |