Results of our study into privacy leaks in health apps

80%

Apps presented privacy issues

3

Apps leaked data in cleartext

Disclaimer

Our results are correct as of the time we carried out our study (Oct 2017-Jan 2018). Newer version of these apps may have addressed the security issues. Several developers reacted to our security advisories and responded with updates to their apps. However, we did not retest newer versions of the apps. We have also been contacted by Ada Health concerning the storage of private data. Our About page has further details.

Our published, peer-reviewed research paper can be found here.

Results Overview

App Info Leaks Insecure Login Insecure Storage Certificate Pinning Cleartext Leaks E2E Encryption
MedicineWise Yes No No Yes No No
MIMS For Android Yes Updated* No No Yes No
Ada - Your Health Companion Yes No No No No No
DrugDoses No No No No No No
Med Helper Pro Pill Reminder No No Updated* No No Yes
ListMeds - Free No No Updated* No No No
myPharmacyLink Yes No No No No No
Nurse's Pocket Drug Guide 2015 No No No No No No
Dosecast - Medication Reminder Yes No No No No No
eTG complete No No No No No No
My PillBox(Meds&Pill Reminder) No No Yes No No No
UpToDate for Android Yes No No No No No
Nurse's Drug Handbook Yes No No No Yes No
Dental Prescriber No No No No No No
Lexicomp Yes No No No No No
CredibleMeds Mobile Yes No No No No No
Medi Droid Pill Reminder No No Yes No No No
Pedi Safe Medications No No No No No No
MediTracker Yes No No No No No
Epocrates Plus Yes No No No No No
Medscape Yes No No No Yes No
Pill Identifier and Drug list Yes No No No No No
Medsmart Meds & Pill Reminder App Yes No No No No No
MedAdvisor Yes No No No No No
Drugs.com Medication Guide Yes No No No No No
MyMeds Yes No No No No No
App Info Leaks Insecure Login Insecure Storage Certificate Pinning Cleartext Leaks E2E Encryption

Updated*: App has been updated to fix the security issue