Claude
Claude ships with 6 third-party SDKs verified in its bytecode: Segment for product analytics, Sentry and Datadog for crash and performance monitoring, plus Firebase, Google Sign-In, and Google Maps. That means usage telemetry flows through three separate vendor pipelines. The manifest also declares read access to roughly 25 Health Connect data types, from heart rate to sleep to menstruation tracking, alongside precise location and calendar access. All of these are gated behind explicit user grants, but they define how much the app is built to reach.
Read from the bytecode.
Your conversations are not what these SDKs collect - they handle usage events, crashes, and performance traces. But three external telemetry vendors in an AI assistant means metadata about how and when you use it leaves the app. The Health Connect permissions only matter if you connect health data: the app cannot read any of it without your explicit grant, and none of it is available to the analytics SDKs by default.
This is static analysis of the APK bytecode installed on real devices: it proves which SDK classes and manifest permissions ship in the app, not what the app transmits at runtime. Traffic analysis is a different measurement.
Hidden inside the code.
What it asks for.
Manifest declares read access to ~25 Health Connect data types (heart rate, sleep, blood pressure, menstruation, sexual activity). Readable only after an explicit per-type user grant
Precise GPS location - notable for a chat assistant, tied to the maps integration
Microphone access for voice mode - expected for the feature
Calendar read access for scheduling integrations
Android attribution API access - install campaign measurement
Keep reading.
The anatomy of a background ping: what your phone tells Google at 3am
Most Android phones send data while you sleep. Here's what one hour of nighttime pings revealed about Google Play Servic...
What is a tracker in an app, and why should you care
A tracker is third-party code the developer bundled in. It reads device IDs, coarse location and your app list, with no ...
Similar risk profiles.
Scan Claude yourself.
Get the full report on your device - with real-time DEX analysis, permission auditing, and breach monitoring. Free, no account needed.