# Security & Privacy Scorecard

## drawnames | Secret Santa app

## What This Means for You

User activity is tracked by Firebase, Google Analytics, and Meta/Facebook SDKs, meaning usage patterns may inform ad targeting across other apps. Sentry collects crash and error data from user sessions. User data is shared with several third parties, so participation in gift exchanges may feed into broader advertising profiles.

## Recommendation: Use With Caution

**Best For:** Holiday gift exchanges with friends and family

**Avoid If:** You prefer not sharing data with Facebook and Meta

## Key Findings

**Data Security** - 3 findings (1 critical, 1 high, 1 medium)

**Network Security** - 2 findings (2 low)

**Code Safety** - 0 findings

**Privacy** - 4 findings (1 critical, 1 high, 2 medium)

## Privacy Concerns

### What Data is Collected

The app collects behavioral and usage data through Firebase Analytics and Google Analytics, tracking how users interact with its features. Sentry gathers session-level error and crash data tied to user activity. The Meta and Facebook SDKs collect information that can be linked to user advertising profiles across the Meta ecosystem.

### Third-Party Data Sharing

User data is shared with Google, Meta, and Facebook. These companies can combine what they collect here with data from other apps and services, building a broader picture of user habits and interests for ad targeting purposes.

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 70/100 |
| Privacy | 55/100 |
| Data Security | 60/100 |
| Network Security | 95/100 |
| Code Safety | 65/100 |
| Data Collection | 50/100 |
| Data Sharing | 55/100 |
| User Control | 60/100 |

## Positive Security Features

- Supports Google Sign-In and Sign In with Apple, letting users authenticate with existing trusted accounts rather than creating a new password for this app.

## Areas for Improvement

- Some data stored by the app could be read by other apps installed on the device.
- Users have limited ability to control what data is shared with advertising networks.
- The number of third parties receiving user data is higher than necessary for core gift-exchange functionality.

---

## About This Analysis

This scorecard is based on a technical review of the app's code and observed behavior. Scores reflect the state of the app at the time of analysis and may change with future updates.

### App Details

- **App:** drawnames | Secret Santa app
- **Package:** com.meetrixonline.drawnames
- **Version:** 1.75.1 (Build 1574)
- **Analyzed:** 2026-02-05