1.1.1.1 + WARP
Cloudflare's privacy DNS app has the most surprising bytecode in this batch. Version 6.38, verified on 15 devices (11 of them agreeing on the exact same set), contains Google AdMob SDK classes plus Zendesk for support - and the manifest requests the advertising-ID and ad-attribution permissions to match. The app shows no ads. The AdMob code most likely arrives as a Play Services dependency, but "we only route your traffic" and "our APK carries an ad SDK and asks for your ad ID" are two different sentences, and only the second one is verifiable. Also present: fine location with a background location service, and the older 6.38.5 build carried Firebase and Sign-In instead - the SDK set changed between minor versions.
Read from the bytecode.
Nothing here proves Cloudflare monetizes you with ads - static analysis shows shipped code and requested permissions, not runtime behavior. But a privacy product that bundles an ad SDK and declares AD_ID access hands you a homework question its marketing does not: why is that code in the box? If you use WARP for privacy, the honest position is that your DNS and traffic promises rest on Cloudflare's policies, not on an APK free of ad plumbing, because the APK is not.
This is static analysis of the APK bytecode installed on real devices: it proves which SDK classes and manifest permissions ship in the app, not what the app transmits at runtime. Traffic analysis is a different measurement.
Hidden inside the code.
What it asks for.
Access to the Android advertising ID - in a privacy app, this needs explaining
Precise location including FOREGROUND_SERVICE_LOCATION - network features, still broad for a DNS client
Android attribution API - install campaign measurement
Storage read access - used for diagnostic uploads
Keep reading.
Free VPN Apps Are a Privacy Trap. Here Is What Is Actually Inside Them.
88% of free VPN apps leak the data they promise to hide. We scanned the APKs to show you exactly what is inside them and...
The VPN Scam Playbook: Six Tactics That Should Be Illegal But Aren't
Free VPN apps use six specific tactics to deceive users. Learn the actual techniques scammers use to pass app store revi...
Similar risk profiles.
Scan 1.1.1.1 + WARP yourself.
Get the full report on your device - with real-time DEX analysis, permission auditing, and breach monitoring. Free, no account needed.