The average Android app you installed today ships with 7 third-party tracker SDKs baked into its bytecode. AppXpose tears the app apart on your device and shows you exactly which ones, before they start phoning home.
The bytecode never leaves your phone.
AppXpose unpacks the APK file directly through the Android Package Manager and reads its DEX classes in-process. Class names, method calls, and obfuscation patterns are matched against 94 curated tracker signatures, without ever uploading a single byte. The actual analysis happens in the same place the malware would: on your device.
"We can't leak what we never had."
HIBP-checked every 72 hours.
For every app you scan, we look up the developer's known email addresses against the Have I Been Pwned database via k-anonymity (no personal data leaves your device). If a developer or one of their services has ever been part of a public breach, you find out before it becomes a problem in your inbox.
"The forecast is the warning."
Every dangerous request, mapped and ranked.
Every Android permission an app requests is mapped to a plain-language explanation, ranked by risk class (normal, dangerous, signature, special), and diffed against your last scan. When an app silently asks for location after an update, you see it on the next open. Not three months later when you happen to check Settings.
"Permissions you can read."
Anonymous votes, profanity-filtered, no algorithm games.
Other AppXpose users have already scanned the apps you have installed. Their scores, comments, and warnings are pinned next to the technical results. There are no follower counts, no engagement loops, just signal from people who came to the same question you did.
"Wisdom of the cautious."
Risk score, breakdown, and the verdict in seconds.
See every SDK baked into the app and what it shares.
Third parties, ad networks, attribution partners. Mapped.
Spot the apps asking for too much, with one-tap delete.
Free-to-download means nothing if the paywall is brutal.
Company, devs, server locations, GDPR status. Receipts.
Every claim AppXpose makes comes with the reasoning attached.
Lock-screen notifications when something material changes.
GUARD is the part of AppXpose that runs while you're not looking. It schedules background workers, diffs each app update against its previous fingerprint, and pings the breach databases on a fixed cadence. When something changes you get exactly one notification, written by a human, not a template.
Get GUARD →For the curious.
For the suspicious.
For the responsible.
AppXpose is free to install and free to try. Three scans a week, full results, no signup, no card. The whole thing took longer to download than to use.