# Security & Privacy Scorecard

## Subastanet

**Version:** 4.9.7 | **Platform:** Android | **Scan Date:** 2026-02-06

**Overall Security Score: 20/100** | **Overall Privacy Score: 15/100**

## What This Means for You

App activity is tracked by Firebase Analytics and shared with Google services. Location data is collected via Google Play Services. Data stored by the app may not be fully protected, putting personal information at higher risk.

## Recommendation: Don't Trust

**Best For:** Users comfortable with Google analytics and data sharing

**Avoid If:** Users prefer apps that store data securely

## Key Findings

**Data Security** - 4 findings (2 critical, 2 medium)

**Network Security** - 1 finding (1 critical)

**Code Safety** - 0 findings

**Privacy** - 5 findings (5 critical)

## Privacy Concerns

### What Data is Collected

User location is collected and processed through Google Play Services Location. Firebase services gather device identifiers, usage patterns, and app interaction data. Cloud messaging services collect device-linked information to deliver notifications. Real-time database services sync in-app data through Google's infrastructure.

### Third-Party Data Sharing

User data is shared with the following third-party services:

- **Firebase Analytics** - Usage and behavioral data shared with Google
- **Firebase Firestore** - App data stored in Google's cloud infrastructure
- **Firebase Realtime Database** - Real-time data synced through Google's servers
- **Firebase Cloud Messaging** - Push notifications routed through Google
- **Firebase Installations** - Device identification registered with Google
- **Google Maps Android SDK** - Location and mapping data processed by Google
- **Google Play Services Location** - Precise location tracked via Google's services
- **InAppWebView** - Embedded content display component that may expose browsing activity to third parties

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 20/100 |
| Privacy | 15/100 |
| Data Security | 25/100 |
| Network Security | 30/100 |
| Code Safety | 25/100 |
| Data Collection | 20/100 |
| Data Sharing | 25/100 |
| User Control | 10/100 |

## Positive Security Features

- No positive security features were identified in this version of the app.

## Areas for Improvement

- The app should apply stronger protections to data stored on device to reduce the risk of unauthorized access to personal information.
- Connections between the app and its servers should be secured so data is protected while it travels across the internet.
- Users should be given clear, accessible controls over what personal data is gathered and which third parties receive it.

---

## About This Analysis

This scorecard reflects findings from automated static analysis of the app's code and configuration. Results represent observed security and privacy practices at the time of the scan.

### App Details

| Field | Value |
|---|---|
| App Name | Subastanet |
| Package | com.subastar.subastanet |
| Version | 4.9.7 |
| Developer | - |
| Scan Date | 2026-02-06 |