# Security & Privacy Scorecard

## Addiuva Without Borders

**Version:** 1.4.2 | **Scan Date:** 2026-02-10

**Security Score: 45/100 | Privacy Score: 55/100**

## What This Means for You

Crash reports and device data are sent to Sentry and Firebase. Calls and messages are routed through Zoom and Twilio infrastructure. Code quality concerns in this version could affect how reliably user data is protected during use.

## Recommendation: Use With Caution

**Best For:** Volunteers comfortable with third-party services
**Avoid If:** You share sensitive personal or health details

## Key Findings

**Data Security** - 4 findings (2 high, 2 medium)

**Network Security** - 1 finding (1 medium)

**Code Safety** - 0 findings

**Privacy** - 2 findings (1 high, 1 medium)

## Privacy Concerns

### What Data is Collected

Crash reports, device diagnostics, and usage data are collected through Sentry and Firebase Crashlytics. Location data is processed through Google Maps. Real-time communication data, including calls and messages, passes through Zoom and Twilio.

### Third-Party Data Sharing

User data is shared with the following third-party services:

- **Sentry** - Error and crash reporting
- **Firebase Cloud Messaging** - Push notifications
- **Firebase Crashlytics** - Crash analytics
- **Zoom Video SDK** - Video and audio calls
- **Socket.IO** - Real-time messaging
- **Google Maps** - Location services
- **Twilio** - Voice and messaging infrastructure

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 55/100 |
| Data Security | 50/100 |
| Network Security | 88/100 |
| Code Safety | 42/100 |
| Data Collection | 60/100 |
| Data Sharing | 50/100 |
| User Control | 65/100 |

## Positive Security Features

- No notable positive security practices were identified in this version of the app.

## Areas for Improvement

- Data handling practices present multiple concerns. User information may not be adequately protected while stored or processed within the app.
- Code quality in this version needs improvement. These issues could affect the reliability of data protection during normal use.
- The range of third-party services receiving user data is broad. Clearer user-facing controls over what is shared would reduce exposure.

---

## About This Analysis

This scorecard reflects automated static analysis of the app's code at the time of the scan. Scores may not reflect changes introduced in later versions.

### App Details

- **App Name:** Addiuva Without Borders
- **Package ID:** com.addiuva_sin_fronteras
- **Version:** 1.4.2
- **Scan Date:** 2026-02-10
- **Platform:** Android