Reference detail

MASVS-STORAGE-2 — The app prevents leakage of sensitive data.

MASVS-STORAGE covers how the app stores sensitive data at rest and whether it prevents that data from leaking.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

android:allowBackup="true"

Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false.

Browse this category

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

5621 matching apps · Counts below include only this page’s mapped finding types.

CKO Kickboxing

com.netpulse.mobile.ckokickboxingBuild 1.35 · 2026-10-13 13:27 UTC

4 matching categories · 8 matching occurrences

B · 83/100Static analysis complete

Fooda

com.vokal.foodaBuild 8.12.39880 · 2026-10-13 13:25 UTC

2 matching categories · 2 matching occurrences

A · 96/100Static analysis complete

Emoji Stickers - WAStickerApps

com.vardhantech.emojistickersBuild 1.4.0 · 2026-10-13 13:24 UTC

1 matching category · 1 matching occurrence

A · 100/100Static analysis complete

ChowNow: Local Food Ordering

com.chownow.discoverBuild 1.71.0 · 2026-10-13 13:22 UTC

3 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

94.1 WHRP

com.airkast.WHRPFMBuild 9.0.5 · 2026-10-13 13:20 UTC

3 matching categories · 3 matching occurrences

B · 84/100Static analysis complete

Lịch Vạn Niên 2026 - Lịch Âm

com.zegome.app.lichvannienBuild 12.2609.21 · 2026-10-13 13:18 UTC

2 matching categories · 2 matching occurrences

A · 90/100Static analysis complete

United Federal Credit Union

com.q2e.unitedfcu5017android.ufcu.uwnmobileBuild 25.6.0 · 2026-10-13 13:12 UTC

2 matching categories · 3 matching occurrences

A · 96/100Static analysis complete

Diwali Greetings Card Maker

diwali.greetings.makerBuild 9.0 · 2026-10-13 13:11 UTC

3 matching categories · 5 matching occurrences

F · 0/100Static analysis complete

China Wok El Salvador

com.chinawokapp.svBuild 1.0.22 · 2026-10-13 13:09 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

LDI

events.grip.ldishowBuild 10.34.5.4958 · 2026-10-13 13:08 UTC

2 matching categories · 6 matching occurrences

A · 97/100Static analysis complete

Liberty Trust and Savings Bank

com.libertytrustsb.mobileBuild 26.1.20 · 2026-10-13 13:07 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Gospel Flix-Christian Movie,AI

com.gospelflix.streamBuild 8025.JesusIsLord · 2026-10-13 13:03 UTC

3 matching categories · 3 matching occurrences

D · 43/100Static analysis complete

Verificador de Precios

mx.jsdesign.pricecheckerBuild 1.7 · 2026-10-13 13:02 UTC

3 matching categories · 3 matching occurrences

A · 91/100Static analysis complete

ChackTok -Photobooth Event App

com.youfan.chacktokBuild 1.9.5 · 2026-10-13 13:00 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

Wicked Clothes

co.tapcart.app.id_cFH3g4xvQvBuild 41 · 2026-10-13 12:57 UTC

4 matching categories · 4 matching occurrences

A · 96/100Static analysis complete

ABG Smart Mobile

com.abg.fismobileBuild 26.08.00 · 2026-10-13 12:55 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

أدعية الحج 1447

com.ad3iyatManasik.hajjBuild 8.0 · 2026-10-13 12:54 UTC

2 matching categories · 2 matching occurrences

A · 92/100Static analysis complete

Sunrise Community Church

io.pushpay.sunrisecommunityBuild 15.7.0 · 2026-10-13 12:53 UTC

1 matching category · 1261 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Debt Payoff Planner & Tracker

com.oxbowsoft.debtplannerBuild 2.54 · 2026-10-13 12:50 UTC

3 matching categories · 3 matching occurrences

A · 97/100Static analysis complete

Newport Cliff Walk Audio Tour

com.actiontourguide.cliffwalkBuild 15.3 · 2026-10-13 12:49 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

Goppert FB Mobile Banking

com.csiweb.digitalbanking.bk0474Build 26.6.1 · 2026-10-13 12:47 UTC

4 matching categories · 7 matching occurrences

D · 38/100Static analysis complete

petrolcard business

com.keepwarning.monobrandBuild 2.5.0 · 2026-10-13 12:45 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Bentonville West Wolverines

com.sidelineaccess.bwhsBuild 6.8.0 · 2026-10-13 12:44 UTC

4 matching categories · 4 matching occurrences

A · 90/100Static analysis complete

Homework's Helper

com.escobar.ayudantedetareasBuild 1.36 · 2026-10-13 12:40 UTC

3 matching categories · 3 matching occurrences

A · 97/100Static analysis complete