# Security & Privacy Scorecard

## ROM Toolbox Lite

**Version:** 6.9.0 (Build 6521) | **Scan Date:** January 20, 2026

## What This Means for You

Usage data is shared with more than 20 advertising and analytics companies, including Facebook, Google, Amazon, and a dozen specialized ad networks. Device activity is used to build an advertising profile and serve targeted ads across platforms. Users have limited control over how their data is used once it leaves the app.

## Recommendation: Unsafe

**Best For:** Android power users comfortable with ad-supported tools
**Avoid If:** Users wanting to limit data shared with ad networks

## Key Findings

**Data Security** - 3 findings (3 critical)

**Network Security** - 1 finding (1 medium)

**Code Safety** - 0 findings

**Privacy** - 3 findings (1 critical, 2 high)

## Privacy Concerns

### What Data is Collected

ROM Toolbox Lite collects device identifiers, usage patterns, and behavioral data to support its advertising and analytics partners. Interactions with the app are logged and tied to the device profile, contributing to an advertising record built around user activity.

### Third-Party Data Sharing

Data is distributed to more than 20 third-party services spanning advertising, analytics, and cloud storage:

- **Advertising networks:** Google AdMob, Facebook Audience Network, Amazon APS, AppLovin MAX, Unity Ads, Chartboost, InMobi, Fyber/Digital Turbine, HyprMX, Smaato, MobileFuse, Moloco, Mintegral, Ogury, Pubmatic, UID2/The Trade Desk, Maple Media Ivory SDK
- **Analytics and crash reporting:** Firebase Analytics, Firebase Crashlytics
- **Consent management:** OneTrust CMP
- **Cloud storage integrations:** Dropbox SDK, Box SDK

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 25/100 |
| Privacy | 30/100 |
| Data Security | 20/100 |
| Network Security | 75/100 |
| Code Safety | 60/100 |
| Data Collection | 70/100 |
| Data Sharing | 55/100 |
| User Control | 45/100 |

## Positive Security Features

None identified.

## Areas for Improvement

- The app does not adequately protect data stored on the device, leaving personal information accessible if the device is used by someone else or accessed without permission.
- Behavioral data is shared with a large number of advertising partners, each operating under their own data retention and usage practices that users have no visibility into or control over.
- The privacy controls available are limited, making it difficult to restrict the scope of data collection or opt out of targeted advertising across the full network of partners.

---

## About This Analysis

This scorecard reflects technical analysis of the app as distributed. Results apply to the version listed below.

### App Details

| Field | Value |
|---|---|
| App Name | ROM Toolbox Lite |
| Package ID | com.jrummy.liberty.toolbox |
| Version | 6.9.0 (Build 6521) |
| Scan Date | January 20, 2026 |