Mobile Permissions & Privacy Audit
mobile-permissions-privacy · v1.1.0 · paid
Evaluates runtime permission requests, privacy manifest compliance, data handling disclosures, and permission graceful degradation.
Permission Requests
permission-requests · weight 0.3
- criticalApp requests only necessary permissionsab-001892
- criticalPrivacy manifest file exists and is complete for iOSab-001893
- highPermission rationale provided before request promptsab-001894
- highPermissions requested at point-of-use, not on app launchab-001895
- highSensitive permissions use proper permission APIab-001896
- highLocation permission distinguishes between always/when-in-use/neverab-001897
Privacy Compliance
privacy-compliance · weight 0.3
- criticalNo sensitive data stored in device shared preferences or NSUserDefaultsab-001898
- criticalKeychain/Keystore used for sensitive data storageab-001899
- highGDPR/CCPA consent UI displayed where requiredab-001900
- highUser data deletion mechanism implementedab-001901
- highPrivacy policy linked in app metadata or UIab-001902
- mediumCrash logs exclude sensitive user dataab-001903
- mediumThird-party SDKs comply with privacy requirementsab-001904
Data Handling
data-handling · weight 0.25
- mediumData collection purposes disclosed to usersab-001905
- lowPhoto library permission limited to selected photos on iOS 14+ab-001906
- lowAnalytics tracking can be disabled by userab-001907
- mediumBiometric authentication uses LocalAuthentication APIab-001908
- lowAdvertising ID reset capability providedab-001909
Graceful Degradation
graceful-degradation · weight 0.15