App analysis · 10.10.2026

Яндекс Метро

ru.yandex.metro · version 3.7.9

10SDKs found

5companies

5companies outside the EEA

11sensitive permissions

In short

SDKs found: 10. Companies: 5, of which outside the EEA — 5. Sensitive permissions: 11 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

Firebase Cloud Messaging — Google LLC, United States outside EEA push notifications
Firebase Crashlytics — Google LLC, United States outside EEA crash reporting
Google AdMob — Google LLC, United States outside EEA advertising
Yandex AppMetrica — Yandex, Russia outside EEA analytics
Yandex Mobile Ads — Yandex, Russia outside EEA advertising
Yandex Mobile Ads (monetization) ✓ — Yandex, Russia outside EEA advertising
Meta (Facebook) Login / Share — Meta Platforms, United States outside EEA social login
Meta (Facebook) SDK — Meta Platforms, United States outside EEA advertising / analytics
AppLovin — AppLovin Corp., United States outside EEA advertising
ironSource — Unity Technologies, Israel outside EEA advertising

Sensitive permissions (11)

precise location — android.permission.ACCESS_FINE_LOCATION
authenticate accounts — android.permission.AUTHENTICATE_ACCOUNTS
accounts on the device — android.permission.GET_ACCOUNTS
files on the device — android.permission.READ_EXTERNAL_STORAGE
write files on the device — android.permission.WRITE_EXTERNAL_STORAGE
NFC: reading cards, documents and tags — android.permission.NFC
phone data (carrier, call state) — android.permission.READ_PHONE_STATE
biometrics (fingerprint, face) — android.permission.USE_BIOMETRIC
access credentials — android.permission.USE_CREDENTIALS
fingerprint — android.permission.USE_FINGERPRINT
advertising ID — com.google.android.gms.permission.AD_ID

All manifest permissions (28)

android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.CHANGE_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.GET_ACCOUNTS
android.permission.INTERNET
android.permission.MANAGE_ACCOUNTS
android.permission.NFC
android.permission.POST_NOTIFICATIONS
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.READ_SYNC_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.USE_BIOMETRIC
android.permission.USE_CREDENTIALS
android.permission.USE_FINGERPRINT
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WRITE_SYNC_SETTINGS
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
com.yandex.permission.AM_COMMUNICATION
com.yandex.permission.READ_CREDENTIALS
ru.yandex.metro.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: ru.yandex.metro.apk (73.9 MB)

Package: ru.yandex.metro · version 3.7.9 (code 2405302)

Android: minimum API 26, target API 36

File SHA-256: 087a8a387c2f8141d5e27c2b09042530feb034eef25e5ce81a342a1fb01a3d2b

Developer signature (SHA-256): aca405ded8b25cb2e8c6da69425d2b4307d087c1276fc06ad5942731ccc51dba

Signed by: OOO Yandex (Moscow, RU) · outside EEA · key since 2009-11-10

Library: 63 SDK · 81 permissions · 2769b78c1753

File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app