# Security & Privacy Scorecard

## Beeper: Universal Chat

## What This Means for You

User activity, including which conversations are opened and how frequently the app is used, is tracked through Rudderstack analytics and shared with that service. Crash reports collected by Sentry may capture details about the device and app state at the time of a crash. Beyond those two services, the app gathers minimal personal data.

## Recommendation: Acceptable

**Best For:** Consolidating multiple chats with standard analytics

## Key Findings

**Data Security** - 5 findings (2 critical, 2 high, 1 medium)

**Network Security** - 1 finding (1 high)

**Code Safety** - 0 findings

**Privacy** - 1 finding (1 medium)

## Privacy Concerns

### What Data is Collected

Beeper collects crash and diagnostic information through Sentry, which may include the device model, operating system version, and app state at the time of a crash. Usage patterns, including which conversations are opened and how frequently the app is used, are collected through Rudderstack analytics. Firebase handles push notifications, associating the device with the user's account for message delivery.

### Third-Party Data Sharing

Usage activity is shared with Rudderstack for analytics. Crash and diagnostic data is shared with Sentry. Push notification delivery routes through Firebase, a Google service. The app also integrates Google ML Kit, Google Maps API, and Google AI (Gemini) for messaging features, which means certain interactions are processed by Google's infrastructure.

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 70/100 |
| Privacy | 75/100 |
| Data Security | 70/100 |
| Network Security | 85/100 |
| Code Safety | 70/100 |
| Data Collection | 95/100 |
| Data Sharing | 90/100 |
| User Control | 95/100 |

## Positive Security Features

- No notable positive security features were identified in this version.

## Areas for Improvement

- The app has several data storage concerns that could leave messages and account information less protected if the device is accessed by another person.
- Network connection protections could be strengthened to better safeguard communications in transit.
- Some code safety practices fall below current standards, which could make the app more susceptible to certain types of attacks.

---

## About This Analysis

This scorecard is based on static analysis of the app's code and configuration. Scores reflect the state of the app at the time of analysis and may not capture all server-side behaviors.

### App Details

- **App:** Beeper: Universal Chat
- **Package:** com.beeper.android
- **Version:** 4.36.3 (1744135684)
- **Scan Date:** 2026-01-21