# Security & Privacy Scorecard

## Clear Wave - Water Eject

**Version:** 1.21 | **Scanned:** 2026-03-26

## What This Means for You

Device usage and behavior is shared with Facebook, Google advertising, and OneSignal for push notifications. Ad targeting runs in the background while the app is in use. Activity is logged through Firebase Analytics even during routine sessions.

## Recommendation: Use With Caution

**Best For:** Occasional water removal with ads accepted

**Avoid If:** You prefer apps without Facebook or ad-network tracking

## Key Findings

**Data Security** - 2 findings (1 medium, 1 low)

**Network Security** - 4 findings (2 critical, 1 medium, 1 low)

**Code Safety** - 0 findings

**Privacy** - 3 findings (1 critical, 1 high, 1 medium)

## Privacy Concerns

### What Data is Collected

- Device identifiers and usage patterns collected by Firebase Analytics
- Crash reports and performance diagnostics collected by Firebase Crashlytics
- Behavioral and interest data collected by Google Mobile Ads (AdMob) and Facebook SDK for ad targeting
- Push notification engagement data collected by OneSignal and Firebase Cloud Messaging
- Purchase history collected by Google Play Billing

### Third-Party Data Sharing

Data is shared with the following third parties:

- **Facebook** - behavioral profiling and advertising audience targeting
- **Google (AdMob, Firebase, Play Billing)** - analytics, advertising, and purchase tracking
- **OneSignal** - push notification delivery and engagement tracking

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 52/100 |
| Privacy | 62/100 |
| Data Security | 82/100 |
| Network Security | 35/100 |
| Code Safety | 88/100 |
| Data Collection | 70/100 |
| Data Sharing | 88/100 |
| User Control | 68/100 |

## Positive Security Features

- No notable positive security practices were identified for this version.

## Areas for Improvement

- Network communication protections are below standard, increasing the risk that data sent while using the app may not be fully protected.
- Multiple advertising and analytics services collect behavioral data with limited options to opt out or limit sharing.
- Transparency around data retention periods and how third parties use behavioral data is lacking.

---

## About This Analysis

### App Details

| Field | Value |
|---|---|
| App Name | Clear Wave - Water Eject |
| Package ID | water.eject.speaker.cleaner |
| Version | 1.21 |
| Scan Date | 2026-03-26 |