App analysis · 10.10.2026

OZON

ru.ozon.app.android · version 19.38.2

5SDKs found
4companies
4companies outside the EEA
16sensitive permissions

In short

SDKs found: 5. Companies: 4, of which outside the EEA — 4. Sensitive permissions: 16 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

  • AppTracer ✓ — VK, Russia outside EEA crash reporting / performance
  • VK SDK / VK ID — VK, Russia outside EEA social login
  • AppsFlyer — AppsFlyer Ltd, Israel outside EEA атрибуция установок
  • Sentry — Functional Software Inc., United States outside EEA crash reporting
  • Firebase Cloud Messaging — Google LLC, United States outside EEA push notifications

Sensitive permissions (16)

  • approximate location — android.permission.ACCESS_COARSE_LOCATION
  • precise location — android.permission.ACCESS_FINE_LOCATION
  • contacts — android.permission.READ_CONTACTS
  • camera — android.permission.CAMERA
  • foreground service: microphone — android.permission.FOREGROUND_SERVICE_MICROPHONE
  • files on the device — android.permission.READ_EXTERNAL_STORAGE
  • photos — android.permission.READ_MEDIA_IMAGES
  • videos — android.permission.READ_MEDIA_VIDEO
  • microphone — android.permission.RECORD_AUDIO
  • write files on the device — android.permission.WRITE_EXTERNAL_STORAGE
  • NFC: reading cards, documents and tags — android.permission.NFC
  • phone data (carrier, call state) — android.permission.READ_PHONE_STATE
  • biometrics (fingerprint, face) — android.permission.USE_BIOMETRIC
  • fingerprint — android.permission.USE_FINGERPRINT
  • ad attribution (Privacy Sandbox) — android.permission.ACCESS_ADSERVICES_ATTRIBUTION
  • advertising ID — com.google.android.gms.permission.AD_ID
All manifest permissions (44)
  • android.permission.ACCESS_ADSERVICES_ATTRIBUTION
  • android.permission.ACCESS_COARSE_LOCATION
  • android.permission.ACCESS_FINE_LOCATION
  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.ACCESS_WIFI_STATE
  • android.permission.BLUETOOTH
  • android.permission.CAMERA
  • android.permission.CHANGE_NETWORK_STATE
  • android.permission.CHANGE_WIFI_STATE
  • android.permission.DETECT_SCREEN_CAPTURE
  • android.permission.DETECT_SCREEN_RECORDING
  • android.permission.FOREGROUND_SERVICE
  • android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
  • android.permission.FOREGROUND_SERVICE_MICROPHONE
  • android.permission.FOREGROUND_SERVICE_PHONE_CALL
  • android.permission.INTERNET
  • android.permission.MANAGE_OWN_CALLS
  • android.permission.MODIFY_AUDIO_SETTINGS
  • android.permission.NFC
  • android.permission.POST_NOTIFICATIONS
  • android.permission.READ_BASIC_PHONE_STATE
  • android.permission.READ_CONTACTS
  • android.permission.READ_EXTERNAL_STORAGE
  • android.permission.READ_MEDIA_IMAGES
  • android.permission.READ_MEDIA_VIDEO
  • android.permission.READ_PHONE_STATE
  • android.permission.RECEIVE_BOOT_COMPLETED
  • android.permission.RECORD_AUDIO
  • android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
  • android.permission.USE_BIOMETRIC
  • android.permission.USE_FINGERPRINT
  • android.permission.USE_FULL_SCREEN_INTENT
  • android.permission.VIBRATE
  • android.permission.WAKE_LOCK
  • android.permission.WRITE_EXTERNAL_STORAGE
  • com.google.android.c2dm.permission.RECEIVE
  • com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
  • com.google.android.gms.permission.AD_ID
  • com.google.android.providers.gsf.permission.READ_GSERVICES
  • com.hihonor.systemappsupdater.activity.applist
  • com.hihonor.systemappsupdater.provider.permission.READ
  • com.hihonor.systemappsupdater.provider.permission.WRITE
  • ru.ozon.app.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
  • ru.ozon.fintech.permission.WRITE_PROVIDER_DATA

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: ru.ozon.app.android.xapk (201.5 MB)
Package: ru.ozon.app.android · version 19.38.2 (code 2724)
Android: minimum API 26, target API 36
File SHA-256: 08685ceff1019afb3d38ebb94ca83ece2c3b3b056ab468535071c366053a0da2
Developer signature (SHA-256): c8fe81752c60f867f7801e4059a9989c660351d459323f22d9bc949182fd6d61
Signed by: Internet Solutions LLC (Moscow, RU) · outside EEA · key since 2011-12-28
Library: 63 SDK · 81 permissions · 2769b78c1753
File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app