Find out who’s hiding in your apps
An app contacts dozens of servers no one ever sees. Skanopy surfaces them all and names the third party behind each one, from ad partners to audience measurement, so your record of processing rests on what actually happens, not on what was declared.
Behind every server, a company.
An app constantly contacts outside servers, and behind each one stands a third party. Ad network, audience measurement, attribution: their SDKs, third-party software components built into the app, have the same access as the app itself, and often fire without the publisher ever seeing them.
See what your apps really do.
Who is really active
The third-party actors that actually fire inside the app, not just the ones it declares.
Where the data goes
The country of each contacted server and its data-protection level per the CNIL referential, a useful marker for transfers outside the European Union.
Fired without consent
The actors that fire before any choice, or despite a refusal to be tracked.
Declared or not
The actors actually active that the consent banner leaves undeclared.
Every point is a finding from the report: captured on a real phone, proven and paired with the fix to make.
No technical skills required.
Aube
- A Google Play Store link
- Or the .apk of an unreleased version
- No integration in the app
- On real phones
- A real user journey replayed
- Every exchange logged
- A recommended action per finding
- A priority and dated evidence
- The fix verified on the next version
Your questions, our answers.
Skanopy does not analyze the code. It runs the app on a real phone and observes what it actually does. A Google Play link or an .apk file is enough.
A list tells you a tracker is present in the app. Skanopy shows that it actually fired, what it sent and to whom. Presence is not activity.
Skanopy places each contacted server by country and shows its data-protection level per the CNIL referential, a valuable marker for transfers outside the European Union.
An actor actually active in the app that the consent banner never mentions to the user.
Yes. In France, the CNIL has run a control campaign on data collection by mobile apps since spring 2025, examining embedded trackers in particular.