App analysis · 12.10.2026

Savon Sanomat

fi.media.savonsanomat · version 1.1.53

3SDKs found

1companies

1companies outside the EEA

4sensitive permissions

In short

SDKs found: 3. Companies: 1, of which outside the EEA — 1. Sensitive permissions: 4 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

Firebase Cloud Messaging — Google LLC, United States outside EEA push notifications
Firebase Crashlytics — Google LLC, United States outside EEA crash reporting
Google AdMob — Google LLC, United States outside EEA advertising

Sensitive permissions (4)

advertising ID (Privacy Sandbox) — android.permission.ACCESS_ADSERVICES_AD_ID
ad attribution (Privacy Sandbox) — android.permission.ACCESS_ADSERVICES_ATTRIBUTION
ad interests (Privacy Sandbox Topics) — android.permission.ACCESS_ADSERVICES_TOPICS
advertising ID — com.google.android.gms.permission.AD_ID

All manifest permissions (13)

android.permission.ACCESS_ADSERVICES_AD_ID
android.permission.ACCESS_ADSERVICES_ATTRIBUTION
android.permission.ACCESS_ADSERVICES_TOPICS
android.permission.ACCESS_NETWORK_STATE
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.INTERNET
android.permission.POST_NOTIFICATIONS
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
fi.media.savonsanomat.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: fi.media.savonsanomat.xapk (37.9 MB)

Package: fi.media.savonsanomat · version 1.1.53 (code 181)

Android: minimum API 26, target API 37

File SHA-256: e24af1700d6601934c67950bcbefc8867bc86feb7a80c73302b3bcc0fe680fdf

Developer signature (SHA-256): 0fc6b9e93e6c781c7a288402368e13cd535481d26b3b26b0ab572d777d29d79f

Signed by: Google Inc. (Mountain View, US) · outside EEA · key since 2024-02-13

Library: 63 SDK · 81 permissions · 2769b78c1753

File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app