Reference detail

MASVS-STORAGE-2 — The app prevents leakage of sensitive data.

MASVS-STORAGE covers how the app stores sensitive data at rest and whether it prevents that data from leaking.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

android:allowBackup="true"

Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false.

Browse this category

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

5852 matching apps · Counts below include only this page’s mapped finding types.

Invoice Maker by Billdu

de.minirechnungBuild 26.9.10 · 2026-10-12 20:25 UTC

3 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

Expense Tracker and Budget

com.jtnrdev.expensetrackerappBuild 1.4.9 · 2026-10-12 20:23 UTC

1 matching category · 1 matching occurrence

A · 100/100Static analysis complete

Phi Launcher

com.launcher.hypeBuild 3.6.3 · 2026-10-12 20:22 UTC

3 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

FUTO Keyboard

org.futo.inputmethod.latin.playstoreBuild 0.1.30-playstore · 2026-10-12 20:20 UTC

1 matching category · 1 matching occurrence

A · 100/100Static analysis complete

Scan.Plus - PDF Scanner & OCR

plus.scan.androidBuild 6.2.0 · 2026-10-12 20:17 UTC

1 matching category · 1 matching occurrence

B · 92/100Static analysis complete

Tasks.org: to-do list & tasks

org.tasksBuild 15.12 · 2026-10-12 20:16 UTC

3 matching categories · 3 matching occurrences

B · 85/100Static analysis complete

CarryMap

com.dataeast.carrymapBuild 7.2.1 · 2026-10-12 20:14 UTC

2 matching categories · 2 matching occurrences

C · 84/100Static analysis complete

Inkitt Galatea: Audio & eBooks

com.coltBuild 23.2.0 · 2026-10-12 20:13 UTC

4 matching categories · 52 matching occurrences

A · 95/100Static analysis complete

GoPro Quik: Video Editor

com.gopro.smartyBuild 13.42 · 2026-10-12 20:11 UTC

2 matching categories · 4 matching occurrences

B · 85/100Static analysis complete

Peddlr POS, Inventory and Load

com.blvckbook.peddlrBuild 5.8.16 · 2026-10-12 20:04 UTC

2 matching categories · 2 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Splynx Field Service

com.splynx.scheduling2Build 1.1.01 · 2026-10-12 20:02 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

3D AR Model Viewer

com.gorisse.thomas.arcameraBuild 2.27.0 · 2026-10-12 20:00 UTC

2 matching categories · 2 matching occurrences

A · 98/100Static analysis complete

FlipaClip: Draw 2D Animation

com.vblast.flipaclipBuild 5.0.2 · 2026-10-12 19:59 UTC

3 matching categories · 11 matching occurrences

B · 94/100Static analysis complete

Spite & Malice

com.northskygames.SpiteAndMaliceBuild 1.6.5 · 2026-10-12 19:57 UTC

1 matching category · 1 matching occurrence

A · 97/100Static analysis complete

Bass Performance Hall

com.instantencore.bph_5174626Build 21.02.00 · 2026-10-12 19:51 UTC

3 matching categories · 7 matching occurrences

C · 84/100Static analysis complete

FamilyAlbum - Photo Sharing

us.miteneBuild 23.0.0 · 2026-10-12 19:48 UTC

2 matching categories · 4 matching occurrences

C · 84/100Static analysis complete

CPU X RAM - Task manager

com.geetmark.cpuxramBuild 26.9.1 · 2026-10-12 19:47 UTC

1 matching category · 1 matching occurrence

A · 100/100Static analysis complete

Pulse SMS (Phone/Tablet/Web)

xyz.klinker.messengerBuild 7.0.4.3045 · 2026-10-12 19:45 UTC

3 matching categories · 4 matching occurrences

D · 40/100Static analysis complete

Navan

com.tripactions.alphaBuild 8.127.0 · 2026-10-12 19:44 UTC

1 matching category · 3 matching occurrences

A · 97/100Static analysis complete

AR Meter: Tape Measure Camera

com.ignatiusDevStudio.ARMeterBuild 4.0.8 · 2026-10-12 19:42 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Safe2SpeakUP

com.linku.android.mobile_emergency.app.activity.safe2SpeakUPBuild 3.0.6 · 2026-10-12 19:41 UTC

1 matching category · 1 matching occurrence

B · 92/100Static analysis complete

Cooking Craze: Restaurant Game

com.bigfishgames.cookingcrazegooglef2pBuild 2.14.0 · 2026-10-12 19:39 UTC

2 matching categories · 2 matching occurrences

D · 54/100Static analysis complete

Potally: Plant Care Tracker

com.potally.appBuild 2.0.5 · 2026-10-12 19:35 UTC

2 matching categories · 2 matching occurrences

A · 96/100Static analysis complete

IoT Solution Online

online.iotplatform.iotsolutionBuild 2.22.24.6796 · 2026-10-12 19:34 UTC

2 matching categories · 5 matching occurrences

A · 97/100Static analysis complete

Korail+

com.korail.talkBuild 7.0.9 · 2026-10-12 19:32 UTC

2 matching categories · 4 matching occurrences

B · 90/100Static analysis complete