Don't Die - Bryan Johnson Security & Privacy Scorecard
by Blueprint Bryan Johnson · iOS
Usage behavior is tracked by Mixpanel for analytics. Health and activity data is stored on device with moderate protections. Google sign-in is available, sharing basic account details with the app.
Best for
Tracking your daily health and longevity routines
Findings
- 0 critical
- 1 high
- 4 medium
- 5 low
- 8 info
1 issue identified across security and privacy analysis.
Top security issues
- Expo OTA Updates Enable Silent JavaScript Bundle Replacement
- kSecAttrAccessibleAlways Keychain Accessibility Level Present in Binary
- RNCAsyncStorage Uses Unencrypted SQLite for Persistent Storage
Top privacy issues
- Sentry Session Replay Active in a Health Data Application
- Privacy Manifests Materially Incomplete — Analytics Data Collection Undisclosed
- Exceptionally Broad HealthKit Data Access — 150+ Data Types Including Sensitive Characteristics
Full analysis
What This Means for You
Usage behavior is tracked by Mixpanel for analytics. Health and activity data is stored on device with moderate protections. Google sign-in is available, sharing basic account details with the app.
Recommendation: Acceptable
Best For: Tracking daily health and longevity routines
Key Findings
Data Security - 6 findings (2 medium, 2 low, 2 info)
Network Security - 4 findings (1 low, 3 info)
Code Safety - 0 findings
Privacy - 2 findings (1 medium, 1 info)
Privacy Concerns
What Data is Collected
The app collects behavioral and usage patterns through Mixpanel analytics. Health and activity data entered by the user is stored locally on the device. When signing in with Google, basic account details are accessed. The app also requests access to the device's media library, file system, and notification permissions.
Third-Party Data Sharing
In-app behavior is shared with Mixpanel for analytics and behavioral profiling. Performance and error data is sent to Sentry to monitor app stability. Signing in with Google shares account information with Google as part of the authentication process. Expo platform services handle push notifications, device details, and over-the-air updates on the device.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 75/100 |
| Privacy | 68/100 |
| Data Security | 67/100 |
| Network Security | 94/100 |
| Code Safety | 79/100 |
| Data Collection | 60/100 |
| Data Sharing | 78/100 |
| User Control | 82/100 |
Positive Security Features
- Network communications are conducted over secure connections, protecting data in transit.
- The app provides reasonable user control options, scoring 82/100 in that category.
- Code safety practices are solid, with no findings in that category.
Areas for Improvement
- The protections applied to health and activity data stored on the device could be strengthened to better guard against access by other apps.
- The scope of behavioral data collected by analytics services is broader than what is needed to run the app, giving third parties a detailed picture of how users interact with it.
- Greater in-app transparency about which third parties receive user data would help users make more informed choices about what is shared.
About This Analysis
This scorecard is generated from automated static analysis of the app's code and configuration. It reflects security and privacy practices observed at the time of the scan and is intended to help users make an informed decision about whether this app is right for them.
App Details
- App: org.bryanjohnson.blueprint
- Version: 1.5.3 (Build 325)
- Scan Date: 2026-03-31
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 70/100 |