ToolBox Security & Privacy Scorecard
Android
Usage is tracked by Yandex AppMetrica and Sentry, and user attention is monetized through multiple ad networks including Google AdMob, Tapsell, Mbridge, and AdColony. User data passes through several third-party systems based outside the US.
Best for
Utility users comfortable with ad-supported apps
Avoid if
You prefer apps without Yandex analytics
Findings
- 1 critical
- 5 high
- 6 medium
- 2 low
- 5 info
1 issue identified across security and privacy analysis.
Top security issues
- Cleartext HTTP Traffic Permitted for lenz.ir Domain
- Unencrypted Authentication Token Storage
- PaymentActivity Deep Link Opens Arbitrary URIs
Top privacy issues
- Pre-Consent Analytics Tracking (AppMetrica)
- Pre-Consent Advertising SDK Initialization (AdMob)
- Unconditional Advertising ID Collection
Full analysis
ToolBox
App: ToolBox (ir.shahbaz.SHZToolBox_demo)
Developer: Not listed
Version: 6.14.0
Scan Date: 2026-03-04
What This Means for You
Usage is tracked by Yandex AppMetrica and Sentry, and user attention is monetized through multiple ad networks including Google AdMob, Tapsell, Mbridge, and AdColony. User data passes through several third-party systems based outside the US.
Recommendation: Use With Caution
Best For: Utility users comfortable with ad-supported apps
Avoid If: You prefer apps without Yandex analytics
Key Findings
Data Security - 7 findings (1 high, 1 medium, 1 low, 4 info)
Network Security - 2 findings (1 critical, 1 medium)
Code Safety - 0 findings
Privacy - 5 findings (3 high, 2 medium)
Privacy Concerns
What Data is Collected
Yandex AppMetrica and Sentry collect data about how users interact with the app, including actions taken and errors the app encounters on the device. Ad networks including Google AdMob, Tapsell, Mbridge, and AdColony gather information about user interests and engagement to serve targeted advertising.
Third-Party Data Sharing
User data is shared with a broad set of third-party companies: Yandex (headquartered in Russia), Google (AdMob, Firebase, ML Kit, and Sign-In), Tapsell, Mbridge, AdColony, and Sentry. Several of these providers operate infrastructure outside the United States, meaning user information may be handled under privacy rules different from those in the user's home country.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 62/100 |
| Privacy | 54/100 |
| Data Security | 58/100 |
| Network Security | 55/100 |
| Code Safety | 72/100 |
| Data Collection | 50/100 |
| Data Sharing | 58/100 |
| User Control | 55/100 |
Positive Security Features
- No specific positive security practices were identified in this version of the app.
Areas for Improvement
- Network connections between the app and remote servers could be better protected, reducing the chance user data is read while in transit.
- The app integrates a large number of advertising and analytics services, each of which receives information about user activity. Reducing the number of these integrations would limit how broadly user data is distributed.
- The app provides limited options to opt out of tracking or data collection, giving users little control over how third parties use their information.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the state of the app at the time of the scan and may not account for updates released afterward.
App Details
- App Name: ToolBox
- Package ID: ir.shahbaz.SHZToolBox_demo
- Version: 6.14.0
- Scan Date: 2026-03-04
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 58/100 |