# A Multi-Tier Security Analysis of Official Car Management Apps for Android
## 5 Low-Level Static Analysis
### Tracker Analysis
* T5: _HockeyApp_[76] is a subsidiary of Microsoft corporation. It is mainly used for building, testing, releasing, and monitoring apps, including the reporting of crash reports in real-time. Exodus categorised this tracker as crash reporter. * T6: _Demdex_[77] is a solution for audience management and it is part of Adobe's advertising ecosystem. According to [78], Demdex \"captures behavioral data on behalf of Websites and advertisers and stores it in a 'behavioral data bank' \". Exodus categorised Demdex as an analytics tracker, noting that it can perform \"cross-device identification\", which is targeting users across different devices through profiling. Furthermore, it is able to apply \"geotargeting and location-based targeting\", using different technologies, such as GPS, beacons, etc. Lastly, it can gather \"Real-time geo- and location-based targeting\" data from a running app. * T7: _Microsoft Visual Studio App Center Crashes_[79] creates an automatic report, which includes any necessary information related to an app crash. When the user re-opens the app, this report is sent to the App Center. In this respect, this tracker is categorised as crash reporter. * T8: Based on Exodus, _Microsoft Visual Studio App Center Analytics_ \"collects real-time analytics that highlight users behavior. It also provides push notifications to mobile devices\". This tracker is categorised as analytics. * T9: _Junio_[80] is an online identity and end-to-end ID identification tracker. It uses artificial intelligence technology to analyse and identify a user. To achieve this, it employs diverse methods, such as liveness detection, optical character recognition, face-based biometrics, etc. * T10: _Urbanarship_[81] is an Android extension to the Google Analytics SDK. * T11: Based on Exodus, _Gigya_[82] is an analytics tracker. * T12: _Facebook Share_[83] enables the end-user to share a post through the app to the Facebook. It is categorised as an \"ads\" tracker. This is because the developer who possesses these information from the trackers, can provide personal ads using Facebook. * T13: _Facebook Login_ is a tracker which can provide the end-user with the Facebook login option. This tracker can be categorised as a profiling one. * T14: Based on Exodus, _Facebook Analytics_ is an analytics tracker. * T15: _Facebook Places_ is a geolocation tracker, which enables users to share their location from inside the app to the Facebook. * T16: According to Exodus, _Twitter MoPub_[84] is an analytics and advertisement tracker. Actually, MoPub caters for a range of services, which can help a developer to publish personalised Twitter ads for targeting the right audience. Specifically, MoPub can aim specific advertisers, based on their highest offering price per ad and connect them to the publishers. * T17: _Salesforce Marketing Cloud_[85] is a tracker destined to handle the communication step of marketing campaigns. It can manage audiences based on their mobile contacts and send targeted and personalised push notifications or email messages to the user of the mobile device. When a campaign is location-based, it can geofence and transmit beacon-based proximity marketing messages to its audience. It also tracks users engagement with the app using analytics. We categorised it as an adv and analytics one. * T18: _Adobe Experience Cloud_[86] is an all-in-one cloud tool, which provides with a collection of solutions, regarding analytics, and advertising. We categorise this tracker as an analytics and ads one. * T19: Based on Exodus, _Countly_[87; 88] is an open-source analytics and profiling tracker. * T20: _Splunk MINT_[89] can be categorised as a analytics and crash reporter tracker. It collects different kinds of data, targeting the performance and usage of the app. * T21: According to Exodus, _Dynatrace_[90] is an analytics tracker. * T22: _Batch_[91] is categorised as an analytics and profiling tracker. Among others, it uses push-notifications and in-app notifications based on the end-user's profile.