MyBible Security & Privacy Scorecard
Android
Firebase Analytics tracks how users interact with the app, and Google Tag Manager can load additional tracking rules remotely. Usage patterns are shared with Google and OneTrust for analytics and consent management. Data stored locally is handled carefully, but network connections have some weaknesses.
Best for
Daily Bible reading without account sign-up
Findings
- 2 critical
- 1 high
- 4 medium
- 4 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Complete TLS/SSL Certificate Validation Bypass in Download Library
- Cleartext Traffic Allowed in Production
- Unencrypted SQLite Databases
Top privacy issues
- Firebase Analytics Auto-Initialization Before Consent
- Advertising Identifier Collection Despite Privacy Claims
- Google Tag Manager Remote Configuration Risk
Full analysis
MyBible
What This Means for You
Firebase Analytics tracks how users interact with the app, and Google Tag Manager can load additional tracking rules remotely. Usage patterns are shared with Google and OneTrust for analytics and consent management. Data stored locally is handled carefully, but network connections have some weaknesses.
Recommendation: Acceptable
Best For: Daily Bible reading without account sign-up
Key Findings
Data Security - 2 findings (2 medium)
Network Security - 3 findings (2 critical, 1 info)
Code Safety - 0 findings
Privacy - 3 findings (1 high, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
The app collects data about how users interact with it, including which features are used and how often. Crash reports are sent automatically when the app encounters an error, which may include device details and the state of the app at that moment.
Third-Party Data Sharing
Usage data is shared with the following third-party services:
- Google (Firebase Analytics) - receives in-app activity and usage patterns
- Google (Firebase Crashlytics) - receives crash reports and device information
- Google (Firebase Cloud Messaging) - handles push notification delivery
- Google (Google Tag Manager) - can remotely load and update tracking configurations
- OneTrust - manages consent preferences and privacy settings on the device
Understanding the Scores
| Category | Score |
|---|---|
| Security | 64/100 |
| Privacy | 78/100 |
| Data Security | 90/100 |
| Network Security | 63/100 |
| Code Safety | 98/100 |
| Data Collection | 80/100 |
| Data Sharing | 98/100 |
| User Control | 85/100 |
Positive Security Features
- App code integrity is exceptionally strong, earning a near-perfect code safety score of 98/100
- No account creation or login is required, so no personal account data is stored on remote servers
- Third-party data sharing is tightly limited, scoring 98/100 - among the strongest possible
Areas for Improvement
- Network connections have weaknesses that could mean user data travels with less protection than expected, especially on public or untrusted Wi-Fi networks
- Some behavioral data is shared with Google for analytics, and the scope of that collection could be reduced
- Consent controls provided by OneTrust could be made more prominent so users can adjust privacy preferences without effort
About This Analysis
This scorecard is based on static analysis of the app's compiled code and configuration. Scores and findings reflect the security and privacy practices observed at the time of the scan.
App Details
- App: MyBible
- Package: org.bb.app
- Version: 0.4.72 (Build 182)
- Scan Date: 2026-03-08
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 71/100 |