Rally by Hound Security & Privacy Scorecard
Android
Activity is tracked by Firebase Analytics and Intercom, which may be used to improve the service and target communications. Several data protection issues mean information stored or transmitted by the app may not be fully protected. User data is not shared with outside advertising partners.
Best for
Pet owners coordinating vet care with their team
Avoid if
You share sensitive pet health records through the app
Findings
- 4 critical
- 4 high
- 5 medium
- 4 low
- 2 info
1 issue identified across security and privacy analysis.
Top security issues
- Complete SSL/TLS Certificate Validation Bypass Available
- Unencrypted Authentication Token Storage (Google Sign-In)
- Unencrypted React Native AsyncStorage (Application Data)
Top privacy issues
- Pre-Consent Intercom SDK Initialization
- Firebase Analytics Auto-Init Without Consent
- Advertising ID Collection Without Consent
Full analysis
Rally by Hound
Security Score: 52/100 | Privacy Score: 68/100
What This Means for You
Activity is tracked by Firebase Analytics and Intercom, which may be used to improve the service and target communications. Several data protection issues mean information stored or transmitted by the app may not be fully protected. User data is not shared with outside advertising partners.
Recommendation: Use With Caution
Best For: Pet owners coordinating vet care with their team
Avoid If: You share sensitive pet health records through the app
Key Findings
Data Security - 4 findings (3 critical, 1 high)
Network Security - 2 findings (1 critical, 1 low)
Code Safety - 0 findings
Privacy - 6 findings (3 high, 2 medium, 1 low)
Privacy Concerns
What Data is Collected
Rally by Hound collects usage and behavioral data through Firebase Analytics and Intercom. Google Sign-In links user identity to in-app activity. Firebase Messaging and Notifee manage push notifications based on usage patterns, and Ably Realtime handles live data synchronization tied to user interactions.
Third-Party Data Sharing
User data is processed by Google through Firebase Analytics and Firebase Messaging, and by Intercom for customer communications. Ably Realtime receives activity data to support live features. No data appears to be passed to advertising networks or outside marketing partners.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 52/100 |
| Privacy | 68/100 |
| Data Security | 50/100 |
| Network Security | 58/100 |
| Code Safety | 96/100 |
| Data Collection | 72/100 |
| Data Sharing | 100/100 |
| User Control | 72/100 |
Positive Security Features
- No notable positive security features were identified in this version.
Areas for Improvement
- The app has weaknesses in how it protects data stored on the device, which could expose pet health records if the device is lost or accessed by someone else.
- Gaps in network communication protections mean user data could be observed while traveling between the app and its servers.
- Privacy controls could be strengthened to give users more transparency and meaningful choice over how their information is collected and used.
About This Analysis
This scorecard reflects findings from automated code analysis of the version listed below. Scores are calculated based on security and privacy practices identified within the app's code and configuration.
App Details
- App: Rally by Hound
- Package: vet.hound.rally
- Version: 1.2.6 (build 1764659724)
- Scan Date: 2026-03-10
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 60/100 |