MCPOTA

MCPOTA Privacy Watch — Technical report

Sample Phone · Sun 8:00 AM → Mon 8:00 AM (last 24 hours) · generated Mon Oct 13, 8:00 AM

Sample report. The apps, servers and numbers are made up to show what an MCPOTA Privacy Watch report looks like. Real reports are made on your phone from what your apps actually did. ← Back to mcpota.com
🧾
2,184
events recorded
🌐
1,972
DNS lookups
🕵️
132
background accesses
🔗
17
access → network
🎯
14
tracker domains
⬆
19.6 MB
sent in background

Collection status

DeviceSample Phone · Android 16 (API 36)
Privacy Watchv1.0
DNS monitoring (VPN)✅ running
App-op access (advanced)✅ connected
Usage access✅ granted
Per-app byte counts✅ available (NetworkStats, ~2 h buckets)
Private DNS modeopportunistic

Activity overview

Background accesses by type

Location: 58 (44%)Wi-Fi/Bluetooth scans: 31 (23%)Clipboard: 12 (9%)Contacts & SMS: 9 (7%)Photos & files: 22 (17%)132while closed
  • 📍 Location 58 44%
  • 📶 Wi-Fi/Bluetooth scans 31 23%
  • 📋 Clipboard 12 9%
  • 👥 Contacts & SMS 9 7%
  • 🖼 Photos & files 22 17%
  • 🎤 Mic & camera 0

Top background domains

ads.sample-tracker.example
🎯 tracker · ChatLoop, Daily Weather+
61×
api.chatloop.example
ChatLoop
58×
metrics.sample-analytics.example
🎯 tracker · ChatLoop, FlashBright
44×
tiles.weather-demo.example
Daily Weather+
33×
events.adnet-demo.example
🎯 tracker · Daily Weather+
27×
cdn.quickshop.example
QuickShop
21×

Background accesses over time

12 accesses12 AM: 6 accesses12 AM1 AM: 4 accesses2 AM: 9 accesses3 AM: 3 accesses3 AM4 AM: 2 accesses5 AM: 5 accesses6 AM: 11 accesses6 AM7 AM: 7 accesses8 AM: 4 accesses9 AM: 3 accesses9 AM10 AM: 5 accesses11 AM: 6 accesses12 PM: 4 accesses12 PM1 PM: 3 accesses2 PM: 8 accesses3 PM: 5 accesses3 PM4 PM: 4 accesses5 PM: 6 accesses6 PM: 7 accesses6 PM7 PM: 5 accesses8 PM: 9 accesses9 PM: 12 accesses9 PM10 PM: 8 accesses11 PM: 7 accesses

Background DNS lookups over time

46 lookups12 AM: 22 lookups12 AM1 AM: 15 lookups2 AM: 18 lookups3 AM: 9 lookups3 AM4 AM: 7 lookups5 AM: 12 lookups6 AM: 31 lookups6 AM7 AM: 40 lookups8 AM: 28 lookups9 AM: 25 lookups9 AM10 AM: 30 lookups11 AM: 33 lookups12 PM: 29 lookups12 PM1 PM: 26 lookups2 PM: 35 lookups3 PM: 31 lookups3 PM4 PM: 27 lookups5 PM: 30 lookups6 PM: 38 lookups6 PM7 PM: 33 lookups8 PM: 41 lookups9 PM: 46 lookups9 PM10 PM: 36 lookups11 PM: 29 lookups

Who was busy when

Background accesses + background lookups per app, per hour. Darker = more.

Daily Weather+Daily Weather+ · 12 AM: 3 eventsDaily Weather+ · 1 AM: 2 eventsDaily Weather+ · 2 AM: 4 eventsDaily Weather+ · 3 AM: 1 eventsDaily Weather+ · 4 AM: 1 eventsDaily Weather+ · 5 AM: 2 eventsDaily Weather+ · 6 AM: 6 eventsDaily Weather+ · 7 AM: 3 eventsDaily Weather+ · 8 AM: 1 eventsDaily Weather+ · 9 AM: 1 eventsDaily Weather+ · 10 AM: 2 eventsDaily Weather+ · 11 AM: 3 eventsDaily Weather+ · 12 PM: 2 eventsDaily Weather+ · 1 PM: 1 eventsDaily Weather+ · 2 PM: 3 eventsDaily Weather+ · 3 PM: 2 eventsDaily Weather+ · 4 PM: 1 eventsDaily Weather+ · 5 PM: 2 eventsDaily Weather+ · 6 PM: 3 eventsDaily Weather+ · 7 PM: 2 eventsDaily Weather+ · 8 PM: 4 eventsDaily Weather+ · 9 PM: 5 eventsDaily Weather+ · 10 PM: 3 eventsDaily Weather+ · 11 PM: 2 eventsChatLoopChatLoop · 12 AM: 2 eventsChatLoop · 1 AM: 1 eventsChatLoop · 2 AM: 3 eventsChatLoop · 3 AM: 1 eventsChatLoop · 4 AM: 0 eventsChatLoop · 5 AM: 2 eventsChatLoop · 6 AM: 3 eventsChatLoop · 7 AM: 2 eventsChatLoop · 8 AM: 2 eventsChatLoop · 9 AM: 1 eventsChatLoop · 10 AM: 2 eventsChatLoop · 11 AM: 2 eventsChatLoop · 12 PM: 1 eventsChatLoop · 1 PM: 1 eventsChatLoop · 2 PM: 3 eventsChatLoop · 3 PM: 2 eventsChatLoop · 4 PM: 2 eventsChatLoop · 5 PM: 3 eventsChatLoop · 6 PM: 2 eventsChatLoop · 7 PM: 2 eventsChatLoop · 8 PM: 3 eventsChatLoop · 9 PM: 4 eventsChatLoop · 10 PM: 3 eventsChatLoop · 11 PM: 3 eventsTuneStreamTuneStream · 12 AM: 0 eventsTuneStream · 1 AM: 0 eventsTuneStream · 2 AM: 1 eventsTuneStream · 3 AM: 0 eventsTuneStream · 4 AM: 0 eventsTuneStream · 5 AM: 0 eventsTuneStream · 6 AM: 1 eventsTuneStream · 7 AM: 1 eventsTuneStream · 8 AM: 0 eventsTuneStream · 9 AM: 1 eventsTuneStream · 10 AM: 0 eventsTuneStream · 11 AM: 0 eventsTuneStream · 12 PM: 1 eventsTuneStream · 1 PM: 0 eventsTuneStream · 2 PM: 1 eventsTuneStream · 3 PM: 0 eventsTuneStream · 4 PM: 1 eventsTuneStream · 5 PM: 0 eventsTuneStream · 6 PM: 1 eventsTuneStream · 7 PM: 1 eventsTuneStream · 8 PM: 1 eventsTuneStream · 9 PM: 2 eventsTuneStream · 10 PM: 1 eventsTuneStream · 11 PM: 1 eventsFlashBrightFlashBright · 12 AM: 1 eventsFlashBright · 1 AM: 1 eventsFlashBright · 2 AM: 1 eventsFlashBright · 3 AM: 1 eventsFlashBright · 4 AM: 1 eventsFlashBright · 5 AM: 1 eventsFlashBright · 6 AM: 1 eventsFlashBright · 7 AM: 1 eventsFlashBright · 8 AM: 0 eventsFlashBright · 9 AM: 0 eventsFlashBright · 10 AM: 1 eventsFlashBright · 11 AM: 1 eventsFlashBright · 12 PM: 0 eventsFlashBright · 1 PM: 1 eventsFlashBright · 2 PM: 1 eventsFlashBright · 3 PM: 1 eventsFlashBright · 4 PM: 0 eventsFlashBright · 5 PM: 1 eventsFlashBright · 6 PM: 1 eventsFlashBright · 7 PM: 0 eventsFlashBright · 8 PM: 1 eventsFlashBright · 9 PM: 1 eventsFlashBright · 10 PM: 0 eventsFlashBright · 11 PM: 1 eventsQuickShopQuickShop · 12 AM: 0 eventsQuickShop · 1 AM: 0 eventsQuickShop · 2 AM: 0 eventsQuickShop · 3 AM: 0 eventsQuickShop · 4 AM: 0 eventsQuickShop · 5 AM: 0 eventsQuickShop · 6 AM: 0 eventsQuickShop · 7 AM: 0 eventsQuickShop · 8 AM: 1 eventsQuickShop · 9 AM: 0 eventsQuickShop · 10 AM: 0 eventsQuickShop · 11 AM: 0 eventsQuickShop · 12 PM: 0 eventsQuickShop · 1 PM: 0 eventsQuickShop · 2 PM: 0 eventsQuickShop · 3 PM: 0 eventsQuickShop · 4 PM: 0 eventsQuickShop · 5 PM: 0 eventsQuickShop · 6 PM: 0 eventsQuickShop · 7 PM: 0 eventsQuickShop · 8 PM: 0 eventsQuickShop · 9 PM: 1 eventsQuickShop · 10 PM: 0 eventsQuickShop · 11 PM: 0 events12 AM3 AM6 AM9 AM12 PM3 PM6 PM9 PM
06 events

Data sent in the background

💬ChatLoop
3.1 MB received
14.2 MB
🛍QuickShop
9.8 MB received
2.1 MB
🌦Daily Weather+
4.2 MB received
1.4 MB
🎧TuneStream
88 MB received
640 KB
🔦FlashBright
1.1 MB received
210 KB

Access → network correlations

A sensitive access followed within 2 minutes by network lookups from the same app.

TimeAppAccessThen contacted
Mon 6:12:04 AMDaily Weather+📍 Location (background)events.adnet-demo.example, ads.sample-tracker.example
Sun 9:41:17 PMFlashBright📋 Clipboard (background)metrics.sample-analytics.example
Sun 9:22:50 PMChatLoop👥 Contacts (background)api.chatloop.example, ads.sample-tracker.example

🔏 Privacy findings

💬

ChatLoop

🔴 ACT · 🔏 privacy com.chatloop.app
How it could be misused
🌦

Daily Weather+

🔴 ACT · 🔏 privacy com.dailyweatherplus
How it could be misused
🔦

FlashBright

🔴 ACT · 🔏 privacy com.flashbright.torch
How it could be misused
🛍

QuickShop

🟡 WATCH · 🔏 privacy com.quickshop.deals
How it could be misused
🎧

TuneStream

🟡 WATCH · 🔏 privacy com.tunestream.music
How it could be misused

🛡 Settings audit

Separate from the findings: access and settings that could lead to a privacy breach, not what apps did. Apps installed from a file are rated one step higher.

🔳

QR Scanner Free

🛡 Review now

👁 Reads your screen

Accessibility access lets it see everything on screen and what you type, and tap for you.

com.qrscanner.free · ⚠ Installed from a file (sideloaded) — check you recognise it

How it could be misused
Checked — fineAppOrigin
⌨ KeyboardPhone keyboard🏭 Pre-installed system tool
🔔 Reads your notificationsSmartwatch companion📲 Installed from Play Store
📳 Can act as a contactless cardWallet🏭 Pre-installed by maker/carrier