# Security & Privacy Scorecard

## EmbedIn

**Overall Security Score:** 35/100 | **Overall Privacy Score:** 40/100

## What This Means for You

User data is handled with weak protections, meaning stored information may not be fully protected if the device is accessed by others. The app has some data protections that fall short of expectations in how it stores and processes user information. Third-party services from Google and Expo have access to app activity.

## Recommendation: Use With Caution

**Best For:** Personal use where users accept some security risk

**Avoid If:** Users store sensitive personal data on their device

## Key Findings

**Data Security** - 5 findings (2 critical, 2 high, 1 low)

**Network Security** - 2 findings (2 high)

**Code Safety** - 0 findings

**Privacy** - 6 findings (1 critical, 3 medium, 2 low)

## Privacy Concerns

### What Data is Collected

The app collects minimal personal data directly. Activity within the app may be logged for licensing verification and update delivery purposes.

### Third-Party Data Sharing

The following external services receive information about user app activity:

- **Expo Updates** - Delivers over-the-air updates to the app and may receive device identifiers and session data to manage update delivery.
- **Google Play Licensing** - Confirms the right to use the app with Google and shares device and account identifiers with Google in the process.

## Understanding the Scores

| Category | Score |
|----------|-------|
| Security | 35/100 |
| Privacy | 40/100 |
| Data Security | 30/100 |
| Network Security | 55/100 |
| Code Safety | 45/100 |
| Data Collection | 100/100 |
| Data Sharing | 100/100 |
| User Control | 85/100 |

## Positive Security Features

- No notable positive security practices were identified in this version of the app.

## Areas for Improvement

- The app stores data on user devices without adequate protection, making it easier for someone with physical access to the phone to read stored information.
- Communications between the app and remote servers could be better protected to keep user data private while it travels over a network.
- The app's internal access controls are configured in ways that could allow other apps on the device to interact with user data in unintended ways.

---

## About This Analysis

This scorecard is generated from automated analysis of the app's code and configuration. It reflects security and privacy practices observed at the time of the assessment and is intended to help users make an informed decision about whether to use this app.

### App Details

- **App Name:** EmbedIn
- **Package ID:** com.vijayyuvi.embedin
- **Developer:** Not specified
- **Version:** 1.0.7
- **Scan Date:** 2026-02-04
- **Provided by:** canITrustThat