Skip to content
Menu

Apps

106 app pages, the newest scanned on 1 October 2026. Each page covers one build: its score, its label and the file behind every finding.

  • 64
    out of 100unTRUSTED

    my moldcell

    Android

    What it means for you

    The app includes code to send account and usage data to Firebase Analytics, Facebook, and Google Ad Services for analytics and advertising purposes. Some code may send activity with less protection than expected on some network connections. An EVAM SDK also includes code to route data to a third-party provider outside major platform ecosystems.

    • 10 findings
    • Data Security 3
    • Network Security 2
    • Code Security 2
    • Third-Party Risk 2
    • Permission Usage 1
  • 95
    out of 100TRUSTED

    Proton Drive: Cloud Storage

    Android

    What it means for you

    File content, names, sizes, and metadata are end-to-end encrypted, meaning Proton cannot read stored files. The app includes code to send crash diagnostics to Sentry using a random identifier that cannot be linked to a Proton account. The build includes no code to send data from normal use to advertising, analytics, or attribution companies.

    • 3 findings
    • Data Security 1
    • Network Security 1
    • Code Security 1
  • 91
    out of 100NOT ASSESSED

    SAP Analytics Cloud

    Android

    What it means for you

    The app includes code to exchange data with the user's organization SAP backend over HTTPS. Firebase Installations registers a device identifier with Google as part of app setup. Enterprise usage telemetry is collected only when enabled by an organization administrator and requires a consent screen before activation.

    • 4 findings
    • Data Security 3
    • Code Security 1
  • 91
    out of 100unTRUSTED

    SAP for Me

    Android

    What it means for you

    The app includes code to send usage and interaction data to Firebase Analytics and Adobe Experience Platform for performance tracking, and to Qualtrics for optional in-app surveys. TrustArc consent management controls whether Adobe analytics tracking is active based on user preferences. Locally stored data is protected, and all traffic to company systems uses secure connections.

    • 6 findings
    • Data Security 1
    • Network Security 1
    • Code Security 2
    • Privacy 2
  • 92
    out of 100NOT ASSESSED

    Lumo by Proton

    Android

    What it means for you

    The app includes code to send crash reports to Proton's own GDPR-governed servers, not to external analytics companies. On-device speech processing via Vosk means audio never leaves the device. Google Play services handle billing and app delivery, with no third-party advertising, analytics, or behavioral tracking SDKs present.

    • 3 findings
    • Network Security 1
    • Code Security 1
    • Privacy 1
  • 58
    out of 100unTRUSTED

    Amex Business Blueprint™

    Android

    What it means for you

    In-app behavior, including taps and screen interactions, is recorded by FullStory and Heap Analytics. The build includes code to send user activity to Salesforce Marketing Cloud for targeted messaging and to Firebase for performance tracking. The build includes multiple third-party SDKs whose code observes financial account interactions.

    • 7 findings
    • Data Security 2
    • Code Security 2
    • Privacy 3