CITT

    Scan results

    Don't Die - Bryan Johnson

    iOS

    Blueprint is a personalized health optimization app by Bryan Johnson that tracks 150+ biomarkers from HealthKit including blood glucose, blood pressure, heart rate, and sleep patterns to generate custom longevity protocols.

    CITT SCORE
    70
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Tracking your daily health and longevity routines

    What It Means For You

    Usage behavior is tracked by Mixpanel for analytics. Health and activity data is stored on device with moderate protections. Google sign-in is available, sharing basic account details with the app.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (18)

    Data Security

    6 total
    2 Medium
    2 Low
    2 Info

    Network Security

    4 total
    1 Low
    3 Info

    Code Security

    4 total
    1 High
    1 Low
    2 Info

    Privacy

    2 total
    1 Medium
    1 Info

    Third-Party Risk

    1 total
    1 Medium

    Permission Usage

    1 total
    1 Low

    Third-Party Services

    Expo EAS Update, React Native, Hermes, Mixpanel, Sentry, RNCAsyncStorage, SDWebImage, ReachabilitySwift, ExpoSecureStore, ExpoNotifications, ExpoMediaLibrary, ExpoConstants, ExpoApplication, ExpoDevice, ExpoFileSystem, ExpoLocalization, ASWebAuthenticationSession, Google Sign-In

    Security Strengths

    • ✓App Transport Security enforced — no arbitrary HTTP loads permitted
    • ✓ASWebAuthenticationSession used for OAuth (isolated process, user-visible)
    • ✓ExpoSecureStore compiled with biometric authentication support
    • ✓No clipboard (UIPasteboard) access anywhere in the binary
    • ✓No advertising tracking (IDFA, ATTrackingManager, AdSupport) found
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    health
    sensitive data
    contacts
    camera
    location

    Package

    org.bryanjohnson.blueprint

    Version

    1.5.3 (Build 325)

    Analysis Date

    Mar 31, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on App Store

    Recommendation: Acceptable

    Key Findings

    Data Security - 6 findings (2 medium, 2 low, 2 info)

    Network Security - 4 findings (1 low, 3 info)

    Code Safety - 0 findings

    Privacy - 2 findings (1 medium, 1 info)

    Privacy Concerns

    What Data is Collected

    The app collects behavioral and usage patterns through Mixpanel analytics. Health and activity data entered by the user is stored locally on the device. When signing in with Google, basic account details are accessed. The app also requests access to the device's media library, file system, and notification permissions.

    Third-Party Data Sharing

    In-app behavior is shared with Mixpanel for analytics and behavioral profiling. Performance and error data is sent to Sentry to monitor app stability. Signing in with Google shares account information with Google as part of the authentication process. Expo platform services handle push notifications, device details, and over-the-air updates on the device.

    Understanding the Scores

    CategoryScore
    Security75/100
    Privacy68/100
    Data Security67/100
    Network Security94/100
    Code Safety79/100
    Data Collection60/100
    Data Sharing78/100
    User Control82/100

    Positive Security Features

    • Network communications are conducted over secure connections, protecting data in transit.
    • The app provides reasonable user control options, scoring 82/100 in that category.
    • Code safety practices are solid, with no findings in that category.

    Areas for Improvement

    • The protections applied to health and activity data stored on the device could be strengthened to better guard against access by other apps.
    • The scope of behavioral data collected by analytics services is broader than what is needed to run the app, giving third parties a detailed picture of how users interact with it.
    • Greater in-app transparency about which third parties receive user data would help users make more informed choices about what is shared.

    About This Analysis

    This scorecard is generated from automated static analysis of the app's code and configuration. It reflects security and privacy practices observed at the time of the scan and is intended to help users make an informed decision about whether this app is right for them.

    App Details

    • App: org.bryanjohnson.blueprint
    • Version: 1.5.3 (Build 325)
    • Scan Date: 2026-03-31

    Right of Reply

    Developer not yet contacted