# Security & Privacy Scorecard

## Octopus Electroverse

**Overall Security:** 72/100 | **Privacy:** 65/100

**Version:** 2025.32.0 (Build 1014) | **Analyzed:** 2026-02-01

## What This Means for You

Usage patterns and in-app behavior are tracked by Amplitude for analytics. Payment data passes through Stripe, and account activity may be visible to Intercom for customer support. Crash reports and app diagnostics are shared with Sentry and Firebase.

## Recommendation: Use With Caution

**Best For:** EV drivers comfortable with standard analytics

## Key Findings

**Data Security** - 3 findings (1 high, 2 medium)

**Network Security** - 1 finding (1 high)

**Code Safety** - 0 findings

**Privacy** - 2 findings (2 high)

## Privacy Concerns

### What Data is Collected

Location is used to show nearby charging points via Mapbox. Amplitude collects data about how the app is used, including which features are interacted with and when. Device information and error reports are collected by Firebase and Sentry. Payment details are processed by Stripe.

### Third-Party Data Sharing

App data is shared with the following services:

- **Amplitude** - behavioral analytics and in-app usage tracking
- **Stripe** - payment processing
- **Intercom** - customer support, with visibility into account activity
- **Sentry** - crash reports and app diagnostics
- **Firebase** - diagnostics and push notification delivery
- **Mapbox** - location-based mapping for charging station discovery
- **OneSignal** - push notifications
- **Google Play Services** - standard Android platform services

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 72/100 |
| Privacy | 65/100 |
| Data Security | 68/100 |
| Network Security | 75/100 |
| Code Safety | 82/100 |
| Data Collection | 62/100 |
| Data Sharing | 70/100 |
| User Control | 58/100 |

## Positive Security Features

- No notable positive security practices were identified for this app.

## Areas for Improvement

- Some data stored on the device is not protected as strongly as it could be, which may allow other apps or someone with physical access to the device to read it.
- Connections to certain services could benefit from stronger transport protections to keep data private while in transit.
- The app offers limited controls over data collection, making it difficult to restrict how user information is used by third-party services.

---

## About This Analysis

Scores and findings are based on automated static analysis of the app binary and code.

### App Details

- **App:** Octopus Electroverse
- **Package:** energy.octopus.electricjuice.android
- **Version:** 2025.32.0 (Build 1014)
- **Scan Date:** 2026-02-01
- **Platform:** Android