Found Tracking Code In QKSMS

I have been trying out Classyshark 3xodus and found the following trackers in QKSMS:

Amplitude
A product analytics company for web or mobile, they seem to focus on gathering information on product use.

Bugsnag
Monitors app stability, I do not see anything wrong with that.

MixPanel
A business analytics company that tracks user interactions with apps and provides tools for “targeted communication” with them.

After doing web searches on these trackers I believe that the description of QKSMS should be edited to mention that this app will gather data about you.

I only see Bugsnag with the same app you use to find trackers and it’s not dangerous.

So you’ve downloaded the latest APK from here: https://f-droid.org/en/packages/com.moez.QKSMS/

Then scanned it?

I’m not seeing anything either: https://www.virustotal.com/gui/file/247765d4741f0814466c68c30213dec1c05f26456ecffce6ee004d18dba35d39/details (besides BugSnag)

1 Like

https://reports.exodus-privacy.eu.org/en/reports/12194/

Check your qkms signature label, these trackers are for the Playstore edition; fdroid qkms only use bugsnag: if it’s opt-out by default, then no warning is necessary.

1 Like

That’s correct - amplitude is only used in the Play Store release for QKSMS. I don’t know about it’s targeted communication functionality, but I use it to learn which features are used and how they are used, so I can try and improve them.

Bugsnag is bundled into the current F-Droid release, but it shouldn’t actually work since the F-Droid build server doesn’t provide an API key. Regardless, it has actually been removed for the next release

2 Likes

There are apps that provide their own Bugsnag keys like FairEmail…

Good to know that you would remove these from the F-Droid. BTW, I am unable to provide an bug report now, however, it seems the latest version, freezes when it tries to backup or restore file size beyond 20-25kb. Not sure, maybe some issue, however, if you can try and check.
Another thing, it does not automatically sync the names against numbers, once contacts have been created. Example: I SMSd someone, before adding them, and then post adding, I SMSd on the same thread, and the contact still showed as number. Reboot, soft reboot, FC, data clear, nothing works. After 5-6 reboots it works automatically.

Report this upstream on Github please.

Perhaps, but that’s not the case here.

Mastodon