# Security & Privacy Scorecard

## Reddit

**Version:** 2025.46.0 (Build 2546031)  
**Scan Date:** 2026-01-20

## What This Means for You

User activity, posts viewed, and interactions are tracked across sessions for analytics. Crash reports and device data are sent to Google. An attribution service records how the user found the app and links in-app behavior back to referral sources.

## Recommendation: Acceptable

**Best For:** Active Reddit users comfortable with standard analytics

## Key Findings

**Data Security** - 4 findings (2 critical, 2 medium)

**Network Security** - 3 findings (1 critical, 1 high, 1 info)

**Code Safety** - 0 findings

**Privacy** - 8 findings (1 critical, 3 high, 3 medium, 1 info)

## Privacy Concerns

### What Data is Collected

Reddit collects user browsing activity, posts viewed, votes, comments, and session interactions. Device information and diagnostic data are captured through Google Firebase and Crashlytics. Branch.io records how the user discovered or was referred to the app and ties that back to in-app behavior.

### Third-Party Data Sharing

Data is shared with the following services:

- **Google Firebase and Crashlytics** - Receives device diagnostics, crash reports, and app usage data
- **Google Play Services** - Handles platform-level integration
- **Branch.io** - Receives attribution and referral data linked to user behavior
- **Firebase Cloud Messaging** - Delivers push notifications on Google infrastructure

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 78/100 |
| Privacy | 72/100 |
| Data Security | 70/100 |
| Network Security | 80/100 |
| Code Safety | 82/100 |
| Data Collection | 75/100 |
| Data Sharing | 80/100 |
| User Control | 70/100 |

## Positive Security Features

- Standard Android platform security libraries are used for data handling.

## Areas for Improvement

- Data stored on the device could be better protected to reduce exposure if the device is lost or accessed by someone else.
- The volume of behavioral data shared with advertising and attribution services could be reduced.
- Options to control or opt out of third-party data collection within the app are limited.

---

## About This Analysis

This scorecard reflects findings from automated static analysis of the app binary and configuration. Results are based on code observable at the time of the scan and may not reflect server-side behavior or recent updates.

### App Details

- **App:** Reddit
- **Package:** com.reddit.frontpage
- **Version:** 2025.46.0 (Build 2546031)
- **Scan Date:** 2026-01-20