Reference detail

MASVS-STORAGE-2 — The app prevents leakage of sensitive data.

MASVS-STORAGE covers how the app stores sensitive data at rest and whether it prevents that data from leaking.

Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.

Mapped checks & review guidance (13)

Amazon S3 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Firebase Realtime Database reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Google Cloud Storage reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

DigitalOcean Spaces reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

android:allowBackup="true"

Backup is on by default on Android; this manifest states it explicitly. If the app stores sensitive local data, define dataExtractionRules/fullBackupContent to exclude it, or set android:allowBackup=false.

Browse this category

Firebase Storage bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloud Firestore reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Sentry DSN

A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.

Browse this category

Supabase project reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Cloudflare R2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Backblaze B2 bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Wasabi bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Alibaba Cloud OSS bucket reference

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

Browse this category

Apps with mapped findings

Reset

5623 matching apps · Counts below include only this page’s mapped finding types.

Gospel Flix-Christian Movie,AI

com.gospelflix.streamBuild 8025.JesusIsLord · 2026-10-13 13:03 UTC

3 matching categories · 3 matching occurrences

D · 43/100Static analysis complete

Verificador de Precios

mx.jsdesign.pricecheckerBuild 1.7 · 2026-10-13 13:02 UTC

3 matching categories · 3 matching occurrences

A · 91/100Static analysis complete

ChackTok -Photobooth Event App

com.youfan.chacktokBuild 1.9.5 · 2026-10-13 13:00 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

Wicked Clothes

co.tapcart.app.id_cFH3g4xvQvBuild 41 · 2026-10-13 12:57 UTC

4 matching categories · 4 matching occurrences

A · 96/100Static analysis complete

ABG Smart Mobile

com.abg.fismobileBuild 26.08.00 · 2026-10-13 12:55 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

أدعية الحج 1447

com.ad3iyatManasik.hajjBuild 8.0 · 2026-10-13 12:54 UTC

2 matching categories · 2 matching occurrences

A · 92/100Static analysis complete

Sunrise Community Church

io.pushpay.sunrisecommunityBuild 15.7.0 · 2026-10-13 12:53 UTC

1 matching category · 1261 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

Debt Payoff Planner & Tracker

com.oxbowsoft.debtplannerBuild 2.54 · 2026-10-13 12:50 UTC

3 matching categories · 3 matching occurrences

A · 97/100Static analysis complete

Newport Cliff Walk Audio Tour

com.actiontourguide.cliffwalkBuild 15.3 · 2026-10-13 12:49 UTC

2 matching categories · 4 matching occurrences

A · 97/100Static analysis complete

Goppert FB Mobile Banking

com.csiweb.digitalbanking.bk0474Build 26.6.1 · 2026-10-13 12:47 UTC

4 matching categories · 7 matching occurrences

D · 38/100Static analysis complete

petrolcard business

com.keepwarning.monobrandBuild 2.5.0 · 2026-10-13 12:45 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

Bentonville West Wolverines

com.sidelineaccess.bwhsBuild 6.8.0 · 2026-10-13 12:44 UTC

4 matching categories · 4 matching occurrences

A · 90/100Static analysis complete

Homework's Helper

com.escobar.ayudantedetareasBuild 1.36 · 2026-10-13 12:40 UTC

3 matching categories · 3 matching occurrences

A · 97/100Static analysis complete

Leadercast 365

tv.uscreen.leadercastnowBuild 3.36.0 · 2026-10-13 12:36 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

BigOven Recipes & Meal Planner

com.bigoven.androidBuild 6.2.62 · 2026-10-13 12:35 UTC

3 matching categories · 3 matching occurrences

B · 85/100Static analysis complete

Padonia Portal

axis_android.axis_android.PadoniaBuild 26.257 · 2026-10-13 12:33 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

Zion KC

io.pushpay.esfirstexcelsiorspringsBuild 15.1.2 · 2026-10-13 12:32 UTC

1 matching category · 1261 matching occurrences

Limited coverageRecorded findings available · overall grade withheld

HBNI Audio (Deprecated)

com.thecodingjsoftware.hutteritechurchBuild 2.4.3 · 2026-10-13 12:30 UTC

1 matching category · 1 matching occurrence

A · 92/100Static analysis complete

Spring Valley Golf Club

com.gallusgolf.c1345.android.neoshogolfBuild 23.01.00 · 2026-10-13 12:29 UTC

4 matching categories · 6 matching occurrences

B · 83/100Static analysis complete

PassKeep: Password Manager

com.redeyes.sspasswordsBuild 2.10.2 · 2026-10-13 12:27 UTC

4 matching categories · 4 matching occurrences

A · 95/100Static analysis complete

Teriyaki Madness

com.teriyaki.appBuild 4.4 · 2026-10-13 12:26 UTC

1 matching category · 1 matching occurrence

A · 98/100Static analysis complete

myWGU Mobile

edu.wgu.students.androidBuild 7.1.0 · 2026-10-13 12:24 UTC

2 matching categories · 2 matching occurrences

A · 97/100Static analysis complete

3D avatar body

org.ibv.app3davatarbodyBuild 3.2.0 · 2026-10-13 12:22 UTC

1 matching category · 1 matching occurrence

A · 99/100Static analysis complete

Luckydog Day & Night Care

com.v4ec6962cd91.wwwBuild 1.0.27 · 2026-10-13 12:21 UTC

2 matching categories · 2 matching occurrences

A · 91/100Static analysis complete

Wow Sweetheart Icon Pack

com.wowthemes.wowvalentinedayhitheme.oneBuild 202600125 · 2026-10-13 12:18 UTC

1 matching category · 1 matching occurrence

B · 88/100Static analysis complete