6 ms·

We (Appfigures) are scanning apps for SDKs so we know which trackers, analytics, location trackers apps are using. We’re working on a way to make that data acc

by arielm 7y ago

We (Appfigures) are scanning apps for SDKs so we know which trackers, analytics, location trackers apps are using. We’re working on a way to make that data accessible to app developers so they can learn from competitors, but having a simple way to tell if an app tracks you that doesn’t require signing up or anything like that could be an interesting idea. Would you actually check an app before downloading/using it?

Nextgrid 7y ago
I am very shy of downloading apps because I expect most of them to stalk me or rat me out to Facebook and don't have the time to check for myself (by using Charles Proxy or Burp Suite). I would definitely appreciate it if there was a service that allows me to quickly check if an app is safe.
- jjgreen 7y ago
  You should try my appcheckr app. Well yes, it does generate a bit of network traffic, it's, err, updating.
- arielm 7y ago
  Noted!
- tim1994 7y ago
  There is, Exodus Privacy (see my reply on the parent comment)
somethoughts 7y ago
Ideally the certification would be made visible by the app creator when the upload the app to Apple/Android App Store so people downloading it would be able see the designation.
- arielm 7y ago
  The problem with that is that do you really believe the developer? It needs to be a 3rd party. Ideally the store itself, but there’s no incentive for the big stores to do that.
Legogris 7y ago
Personally, I'd want to have the source and run that software myself - how else could I trust that the app developer didn't bribe you or find an easy way to subvert your detection?
- arielm 7y ago
  Valid point. Getting something you can scan for installed SDKs is pretty darn hard in many cases, so I doubt most people would want to set up and maintain something to do that for a few apps...
- r-w 7y ago
  Unfortunately, this is one case where being open-source would probably make the scanner easier to game.
pcmaffey 7y ago
The key here would be for you to become a search engine of apps that are "3rd-party tracking free", and then build trust with customers who value that and become a destination for app discovery. For developers, additional traffic becomes an incentive to comply.
tim1994 7y ago
There is another service that does this for Android apps: https://reports.exodus-privacy.eu.org/en https://reports.exodus-privacy.eu.org/en It is also build into the Aurora Store (alternative Google Play Store client for Android).

by arielm 7y ago

Nextgrid 7y ago

I am very shy of downloading apps because I expect most of them to stalk me or rat me out to Facebook and don't have the time to check for myself (by using Charles Proxy or Burp Suite). I would definitely appreciate it if there was a service that allows me to quickly check if an app is safe.

jjgreen 7y ago
You should try my appcheckr app. Well yes, it does generate a bit of network traffic, it's, err, updating.
arielm 7y ago
Noted!
tim1994 7y ago
There is, Exodus Privacy (see my reply on the parent comment)

somethoughts 7y ago

Ideally the certification would be made visible by the app creator when the upload the app to Apple/Android App Store so people downloading it would be able see the designation.

arielm 7y ago
The problem with that is that do you really believe the developer? It needs to be a 3rd party. Ideally the store itself, but there’s no incentive for the big stores to do that.

Legogris 7y ago

Personally, I'd want to have the source and run that software myself - how else could I trust that the app developer didn't bribe you or find an easy way to subvert your detection?

arielm 7y ago
Valid point. Getting something you can scan for installed SDKs is pretty darn hard in many cases, so I doubt most people would want to set up and maintain something to do that for a few apps...
r-w 7y ago
Unfortunately, this is one case where being open-source would probably make the scanner easier to game.

pcmaffey 7y ago

The key here would be for you to become a search engine of apps that are "3rd-party tracking free", and then build trust with customers who value that and become a destination for app discovery. For developers, additional traffic becomes an incentive to comply.

tim1994 7y ago

There is another service that does this for Android apps: https://reports.exodus-privacy.eu.org/en https://reports.exodus-privacy.eu.org/en It is also build into the Aurora Store (alternative Google Play Store client for Android).