Keep control of what your app really does
Your advertising and measurement partners keep your app alive. But do you know what they send, and when? Skanopy gives you that visibility.
Where the data goes
Every server contacted, the country it answers from, and the organisation hosting it.
See your app the way a regulator will.
An ad network, an audience-measurement tool, an attribution service: every third-party actor present in your app puts you on the hook, even unknowingly. These pieces embedded in the app have the same access as your own code, and fire without you seeing them. In France, the CNIL has been checking exactly this on mobile apps since spring 2025.
The point is not to remove your trackers. It is to know which one sends what, to whom, with or without the user’s consent, so you can decide with full knowledge. Skanopy runs your app on a real phone and observes what it really does: the servers it contacts, the data that leaves, how the consent banner is actually respected.
You get a clear, dated finding, without touching your code. Enough to get ahead of a check, align your app with the GDPR and the ePrivacy directive, and protect the trust that keeps your users coming back.
What you gain.
The concrete gain, exactly as it appears in the report you receive.
Get ahead of the checks
Regulators now review mobile apps; in France, the CNIL has since spring 2025. Know where you stand before them.
Master your partners
The list of third-party actors actually active in your app, and the data they receive.
Keep users’ trust
Consent respected and data under control: the foundation of a lasting relationship with your users.
Without tying up your teams
Concrete, prioritized findings, with no access to your code and no technical project.
Before you submit to the store
Google Play holds the publisher alone responsible for its data collection declaration, third-party SDKs included. You see what they collect before you submit, not after.
Does your consent banner truly respect your users’ choice?
We installed 20 of the top-ranked news apps and refused tracking. Within about two minutes of use, 95 third-party actors fired despite that refusal.
Read the full study- Advertising40
- Identity and data11
- Infrastructure / CDN11
- Analytics6
- Video6
- Social5
- Outside the list16
0third-party actors fired
Number of third-party actors per category, tracking refused.
How Skanopy works.
Point us to the app
Two ways in:
- A Google Play Store link
- A .apk file, for a pre-release before it ships
Skanopy analyzes it
On real phones, a real journey replayed automatically:
- Tracking refused
- Signed in
- Article opened
- Form submitted
Every third-party actor that fires is mapped.
You receive your report
Every fact, named:
- Active third-party actors
- Identifiers shared
- Permissions requested
- Storage access
- Consent-banner compliance
Your questions, our answers.
No. Skanopy gives you the visibility to decide: keep your monetization while keeping control of the risk and of consent. The analysis also shows the partners receiving nothing after an acceptance, measurement you are losing without knowing it.
A code scan needs access to your repository and reads what your teams wrote. Skanopy starts from the published file and observes what the app actually sends. One tells you what was intended, the other what left.
Yes. A Google Play link is enough. That is what lets you analyze a contractor’s app, a partner’s app, or an app you are considering acquiring.
Within 48 hours.
Under the GDPR, the trackers embedded in your app carry at least your shared responsibility, and you must audit your partners. Skanopy shows you what they really do.
Yes. In France, the CNIL has run a dedicated control campaign on mobile apps since spring 2025.
No, never your source code. A Google Play link, or an .apk file (your app’s build) if it is not published.
Skanopy is a French company, and your analyses are processed in the European Union.
Skanopy analyzes Android apps.
Will I have to remove my trackers and lose revenue?
No. Skanopy gives you the visibility to decide: keep your monetization while keeping control of the risk and of consent. The analysis also shows the partners receiving nothing after an acceptance, measurement you are losing without knowing it.