Just tested Quirk, a GPL-licensed tool for Cognitive Behavioral Therapy. The idea is rather simple: you put your negative thought in there, categorize and analyse it, then find a better thought.
The app author highlights the privacy features of the app, but as it turns our, there are 11 trackers in it :/
The app author doesn't use those intentionally but they come with dependencies and they are active by default, as I just checked with a network analysis.
@sheogorath ha closed already?!
As the options are:
1. Fix the build framework upstream, which is a ton of work and too much for a solo developer
2. Switch the build framework, which would be possible, but require a major rewrite of a software that just saw it's first official release.
Finally of course this issue looks quite negative for an app that, as mentioned, highlights privacy
I don't know much about writing android applications, And even less about hybrid build frameworks. But when someone knows more about it, and there is an easy fix for things, I'm sure a PR would be more than welcome.
Hint: I didn't publish this here in order to warn about app in first place, but to give people the hint that the decision of a build framework and dependencies can have bad side effects.
Sadly those trackers aren't just there, they are also active and transmit data at app startup to Google and Facebook which includes the app name…
In other words: When you use this app for medical reasons Google and Facebook will know about it.
That's really unacceptable :/