Bono Security & Privacy Scorecard
Android
Account activity and usage data flows through Google and Firebase services. The app has two critical-severity issues in how it protects data in transit and at rest, meaning user data may not be fully protected under certain conditions. Data sharing with third parties is limited, which is a genuine positive.
Best for
Personal use where data sharing is minimal
Avoid if
You store sensitive personal or financial data in it
Findings
- 2 critical
- 1 high
- 11 medium
- 3 low
- 0 info
17 issues identified across security and privacy analysis.
Top security issues
- Cleartext Traffic Explicitly Enabled
- OAuth Access Tokens Logged in Plaintext
- Google Sign-In Account Data Stored Unencrypted
Top privacy issues
- Firebase Messaging Analytics Triggered Without Consent
- No Consent Management Platform (CMP) Detected
- Excessive Google OAuth Scopes Requested
Full analysis
Bono
Developer: Not listed
Version: 1.0.271 (Build 271)
Platform: Android
Analyzed: 2026-03-26
What This Means for You
Account activity and usage data flows through Google and Firebase services. The app has two critical-severity issues in how it protects data in transit and at rest, meaning user data may not be fully protected under certain conditions. Data sharing with third parties is limited, which is a genuine positive.
Recommendation: Use With Caution
Best For: Personal use where data sharing is minimal
Avoid If: You store sensitive personal or financial data in it
Key Findings
Data Security - 5 findings (1 critical, 4 medium)
Network Security - 5 findings (1 critical, 1 high, 3 medium)
Code Safety - 0 findings
Privacy - 3 findings (3 medium)
Privacy Concerns
What Data is Collected
The app connects to Google and Firebase services, which collect account identifiers and usage activity. This includes information tied to the user's Google account and how the user interacts with the app over time.
Third-Party Data Sharing
Sharing with outside companies is minimal. The services present - Google Sign-In, Firebase, and Google Play Services - support core app functions rather than advertising or behavioral profiling of user activity.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 62/100 |
| Privacy | 89/100 |
| Data Security | 72/100 |
| Network Security | 66/100 |
| Code Safety | 97/100 |
| Data Collection | 88/100 |
| Data Sharing | 100/100 |
| User Control | 88/100 |
Positive Security Features
- Data sharing with external companies scores 100/100, meaning user data stays within a narrow set of services.
- Code quality and safety practices score 97/100, indicating a low risk of runtime instability from code defects.
- User control over data scores 88/100, indicating the app respects standard data management expectations.
Areas for Improvement
- The way the app protects data moving between the device and its servers needs strengthening to reduce the risk of user data being read by others in transit.
- Data stored locally on the device should be better secured so it remains protected if the device is ever accessed without authorization.
About This Analysis
This scorecard reflects findings from static analysis of the app's code and configuration as of the scan date. Scores represent observed practices and may not capture all behaviors that occur while the app is running.
App Details
- App Name: Bono
- Package ID: md.bono
- Version: 1.0.271 (Build 271)
- Scan Date: 2026-03-26
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 70/100 |