TinyTorch Flashlight
com.tinytorch.flashlightby TinyTorch Labs
Declaration discrepancy · high
Data safety section declares no data collected. APK embeds 6 tracker SDK(s) from 6 company(ies).
Google AdMob (Google) · Meta Audience Network (Meta Platforms) · AppLovin (AppLovin) · Unity3d Ads (Unity Technologies) · IronSource (ironSource (Unity)) · Flurry (Flurry (Yahoo))
Declaration discrepancy · high
Data safety section declares no data shared with third parties. APK embeds 6 advertising/profiling SDK(s).
Google AdMob (Google) · Meta Audience Network (Meta Platforms) · AppLovin (AppLovin) · Unity3d Ads (Unity Technologies) · IronSource (ironSource (Unity)) · Flurry (Flurry (Yahoo))
Declared — the store listing
- “No data collected”
- “No data shared with third parties”
Source: Play Data Safety section
Static — compiled into the APK
- Google AdMobGoogle
- Meta Audience NetworkMeta Platforms
- AppLovinAppLovin
- Unity3d AdsUnity Technologies
- IronSourceironSource (Unity)
- FlurryFlurry (Yahoo)data-broker-linked
Source: public APK signature analysis (Exodus Privacy)
Why this score
- +246 tracker SDK(s) embedded in the APK
- +24advertising/profiling SDKs from 6 distinct company(ies): AppLovin, Flurry (Yahoo), Google, Meta Platforms, Unity Technologies, ironSource (Unity)
- +10at least one embedded SDK belongs to a company publicly identified as a data broker: Flurry (Yahoo)
- +6declares 3 sensitive permission(s): camera, phone identity, precise location
- +15the app's store declaration contradicts what is actually embedded in its APK
Declared permissions
- CAMERA
- ACCESS_FINE_LOCATION
- READ_PHONE_STATE
- INTERNET
source: fixture · analyzed 2026-07-13T12:20:42Z · store listing