# Security & Privacy Scorecard

## com.bottledapp.bottled

## What This Means for You

User activity is tracked by Firebase Analytics, Google Ads, and Tenjin Attribution, which share behavioral data with advertisers. Crash and session data is collected through Firebase Crashlytics and Sessions. Account authentication and messages rely on Google Firebase infrastructure.

## Recommendation: Acceptable

**Best For:** Social messaging with standard analytics

## Key Findings

**Data Security** - 9 findings (1 critical, 3 high, 4 medium, 1 low)

**Network Security** - 1 finding (1 low)

**Code Safety** - 0 findings

**Privacy** - 7 findings (3 critical, 2 high, 2 medium)

## Privacy Concerns

### What Data is Collected

The app collects behavioral and usage data through Firebase Analytics and Firebase Sessions. Crash reports are gathered through Firebase Crashlytics. Install and attribution data is collected by Tenjin. Account information, messages, and files are stored in Firebase Firestore, Realtime Database, and Cloud Storage. Video call data is processed through the Twilio Video SDK. Purchase and subscription information is handled by RevenueCat.

### Third-Party Data Sharing

Behavioral data is shared with Google through Firebase Analytics and the Google Ads SDK, which may use it to serve targeted advertising. Tenjin receives install and attribution data to measure ad campaign performance. OneSignal processes device information to deliver push notifications. RevenueCat receives purchase history and subscription status. Each of these services operates under its own data policies.

## Understanding the Scores

- **Security:** 80/100
- **Privacy:** 80/100
- **Data Security:** 80/100
- **Network Security:** 100/100
- **Code Safety:** 85/100
- **Data Collection:** 80/100
- **Data Sharing:** 80/100
- **User Control:** 80/100

## Positive Security Features

- Network communications are well protected, with the app scoring a perfect 100/100 for how it handles data in transit.

## Areas for Improvement

- The app relies on multiple advertising and attribution services that collect and share behavioral data; reducing this footprint would give users more control over how their information is used.
- Some data storage practices could be tightened to reduce the chance that sensitive information is exposed under certain conditions.
- Clearer in-app controls over data collection and third-party sharing would give users more meaningful choices about their privacy.

---

## About This Analysis

### App Details

| Field | Value |
|-------|-------|
| App ID | com.bottledapp.bottled |
| Version | 2.14.2 (Build 20142) |
| Scan Date | 2026-02-03 |
| Analysis Type | Static Analysis |