# Security & Privacy Scorecard

## Salt Edge Authenticator

**Version:** 3.9.0 (Build 85)  
**Platform:** Android  
**Scan Date:** 2026-02-04

## What This Means for You

Usage patterns and crash reports are shared with Firebase and Google Analytics. Stored authentication data may not be as fully protected on the device as expected.

## Recommendation: Use With Caution

**Best For:** Users comfortable with Firebase analytics  
**Avoid If:** You store sensitive financial data on-device

## Key Findings

**Data Security** - 3 findings (1 critical, 2 medium)

**Network Security** - 3 findings (3 medium)

**Code Safety** - 0 findings

**Privacy** - 2 findings (1 high, 1 medium)

## Privacy Concerns

### What Data is Collected

The app collects usage patterns, crash reports, and device information. This data is gathered continuously in the background through multiple analytics and diagnostics services.

### Third-Party Data Sharing

Data is shared with the following third-party services:

- Firebase Analytics
- Firebase Crashlytics
- Firebase Cloud Messaging
- Google Analytics

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 75/100 |
| Data Security | 25/100 |
| Network Security | 70/100 |
| Code Safety | 30/100 |
| Data Collection | 80/100 |
| Data Sharing | 90/100 |
| User Control | 85/100 |

## Positive Security Features

No notable positive security features were identified in this version of the app.

## Areas for Improvement

- The protections around stored authentication data should be strengthened so saved account details remain safe even if the device is physically accessed.
- The app shares usage patterns and crash data with multiple third-party analytics services. Reducing this third-party data sharing would better protect user behavioral data.
- Certain network communication practices could be tightened to give data stronger protection while it travels between the device and remote servers.

---

## About This Analysis

This scorecard was produced through automated static analysis of the app's compiled code and configuration. Scores reflect the state of the app at the version listed below.

### App Details

- **App Name:** Salt Edge Authenticator
- **Package ID:** com.saltedge.authenticator
- **Version:** 3.9.0 (Build 85)
- **Scan Date:** 2026-02-04