InfoCasas Security & Privacy Scorecard
Android
User activity is tracked by Firebase, Facebook, and Sentry, meaning browsing behavior and usage patterns are shared with multiple third parties. Users have limited control over what data is collected or how long it is retained. Data handling practices in this app mean personal information deserves extra caution before sharing it.
Best for
House hunters comfortable with standard analytics
Avoid if
You share sensitive financial details in the app
Findings
- 4 critical
- 5 high
- 9 medium
- 5 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Sentry Authentication Token Exposed in App Bundle
- Android Keystore Password Exposed in App Bundle
- JavaScript Interface Exposed in WebView
Top privacy issues
- Advertising ID Collection Enabled Without Consent
- Session Replay Infrastructure with PII Exposure Risk
- Cross-SDK Data Aggregation Without Consent
Full analysis
InfoCasas
Version: 5.8.5 (Build 400130)
Scan Date: February 6, 2026
Overall Security Score: 45/100 | Privacy Score: 40/100
What This Means for You
User activity is tracked by Firebase, Facebook, and Sentry, meaning browsing behavior and usage patterns are shared with multiple third parties. Users have limited control over what data is collected or how long it is retained. Data handling practices in this app mean personal information deserves extra caution before sharing it.
Recommendation: Use With Caution
Best For: House hunters comfortable with standard analytics
Avoid If: You share sensitive financial details in the app
Key Findings
Data Security - 11 findings (1 critical, 1 high, 6 medium, 3 low)
Network Security - 2 findings (1 high, 1 low)
Code Safety - 0 findings
Privacy - 4 findings (2 critical, 2 medium)
Privacy Concerns
What Data is Collected
The app collects device identifiers, usage patterns, crash reports, and behavioral data through multiple analytics and tracking services. Property search activity, including listings viewed and filters applied, may be recorded and associated with the device or account profile.
Third-Party Data Sharing
User data is shared with the following third parties:
- Firebase (Analytics, Crashlytics, Messaging, Remote Config) - Google's analytics and infrastructure platform
- Facebook SDK - behavioral and advertising data sharing with Meta
- Sentry - error and performance monitoring
- OneSignal - push notification delivery
- Google Sign-In - authentication services
- Google Maps SDK - location and mapping services
- BugButtle - in-app feedback and session recording
Understanding the Scores
| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 40/100 |
| Data Security | 50/100 |
| Network Security | 85/100 |
| Code Safety | 65/100 |
| Data Collection | 35/100 |
| Data Sharing | 55/100 |
| User Control | 30/100 |
Positive Security Features
- No notable positive security practices were identified in this version.
Areas for Improvement
- The app collects a broad range of personal and behavioral data with little visibility into what is stored or how long it is retained.
- Multiple third-party tracking and advertising services operate within the app, sharing behavioral profiles across platforms.
- Data handling practices suggest user data may not be fully protected from unintended access.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the security and privacy posture of the version analyzed and may change with future updates.
App Details
- App Name: InfoCasas
- Package ID: uy.com.infocasas.infoapp
- Version: 5.8.5 (Build 400130)
- Scan Date: February 6, 2026
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #3 (current) | 42/100 |