Canva
Canva is a legitimate design platform with no dangerous permissions on Android, relying on cloud-based processing. Minor privacy concerns from typical analytics and ad-tech SDKs, but well-disclosed and manageable through account settings.
How we got to 28.
Google Analytics, Firebase, AdMob, Adjust - standard for freemium apps
Facebook, Instagram, TikTok, Google Drive, Dropbox - each adds data exposure
Free tier includes ads; premium removes them but data collection continues
Designs stored on Canva servers - centralizes data exposure
Zero dangerous permissions - exceptional for a feature-rich creative app
Detailed privacy policy with clear opt-out mechanisms
Canva Inc. - Australian company, well-funded, public bug bounty
No widely-reported breaches or security incidents
Can create designs without mandatory account signup
Hidden inside the code.
Keep reading.
I scanned 47 apps on my phone. Here's what I found.
A full weekend audit of every app on a normal Android phone. 47 apps, 211 trackers, and a permission count that would ma...
What is a tracker in an app, and why should you care
Trackers are code libraries hidden inside apps that collect your data for third parties. Here is how they work, what the...
Similar risk profiles.
Scan Canva yourself.
Get the full report on your device - with real-time DEX analysis, permission auditing, and breach monitoring. Free, no account needed.