# Security & Privacy Scorecard

## Rocket Money - Bills & Budgets

com.truebill | Version 13.3.0 | March 26, 2026

## What This Means for You

Financial activity, spending habits, and linked account data are shared with multiple analytics and advertising services including Google Ads, Segment, and Singular. Eight analytics and marketing tools run alongside budgeting data, meaning user behavior inside the app informs ad targeting. Network communication has a critical-level finding that could affect how securely data travels.

## Recommendation: Use With Caution

**Best For:** Tracking spending and managing bills in one place
**Avoid If:** You prefer financial data not shared with ad networks

## Key Findings

**Data Security** - 4 findings (4 medium)

**Network Security** - 3 findings (1 critical, 1 medium, 1 info)

**Code Safety** - 0 findings

**Privacy** - 5 findings (1 high, 3 medium, 1 low)

## Privacy Concerns

### What Data is Collected

Rocket Money collects financial activity, account balances, spending patterns, and behavioral data generated while users use the app. This includes data from linked bank and credit card accounts through Plaid.

### Third-Party Data Sharing

User data is shared with the following services:

- **Firebase Analytics** - Usage and behavioral tracking
- **Braze** - Customer engagement and messaging
- **Intercom** - In-app support and communication
- **Sentry** - Error and performance monitoring
- **Datadog RUM** - Real-user monitoring
- **Singular** - Marketing attribution
- **Segment** - Data routing to multiple destinations
- **Google Ads** - Advertising targeting
- **Plaid Link** - Financial account connectivity
- **Stripe** - Payment processing
- **Google Play Billing** - In-app purchase management

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 60/100 |
| Privacy | 66/100 |
| Data Security | 58/100 |
| Network Security | 60/100 |
| Code Safety | 99/100 |
| Data Collection | 72/100 |
| Data Sharing | 82/100 |
| User Control | 78/100 |

## Positive Security Features

- The app's internal code structure follows strong safety practices, scoring 99 out of 100 in code safety.

## Areas for Improvement

- Financial behavioral data is shared with multiple advertising and analytics services. Offering a clear opt-out or reducing this sharing would better protect user privacy.
- Network communication has a critical-level finding. Stronger protections for data in transit would reduce risk to financial information.
- The number of third-party services with access to user data is high for a financial app. Limiting access to only services essential for core functionality would meaningfully improve privacy.

---

## About This Analysis

This scorecard reflects automated static analysis of the published app binary and may change as the app updates.

### App Details

- **App Name:** Rocket Money - Bills & Budgets
- **Package ID:** com.truebill
- **Version:** 13.3.0 (Build 12349)
- **Platform:** Android
- **Analysis Date:** March 26, 2026
- **Total Findings:** 17 (1 critical, 1 high, 9 medium, 4 low, 2 info)