# AppXpose > Scan any Android app for hidden trackers, dangerous permissions, and breach exposure. Scan any Android app for hidden trackers, dangerous permissions, and breach exposure. On-device analysis, no login required. Free privacy scanner for your phone. ## Facts - Website: https://appxpose.app - Pricing: freemium - Categories: Mobile Apps - LotsDirectory page: https://lots.directory/products/appxpose - Listing state: Unclaimed. We listed this product from its public website, and its owner has not claimed it yet. ## Detailed info ## What is AppXpose? AppXpose is an Android app that scans installed apps on the device for trackers, permissions, and changes. The DEX bytecode analysis runs on the phone, and GUARD adds background alerts. The page says there is no iOS version. ## What AppXpose does The user picks an installed app. AppXpose reads the APK and AndroidManifest on the device, then pattern-matches class names against tracker signatures. The page says signature matching is deterministic and the LLM never decides whether a tracker is present. A deterministic pre-score runs from permission analysis, update history, installation source, APK integrity, breach history, tracker presence, and signing-certificate checks, across 45 Play Store categories. An LLM then writes the breakdown, the developer profile, the paywall analysis, and the explanations, and estimated parts are marked estimated. Risk levels on the method page run from 0 to 100: LOW 0-29, MEDIUM 30-59, HIGH 60-79, and CRITICAL 80-100. Results stay in a local App Index. ## Who AppXpose is for The free plan is described for casual checks. GUARD is described for people who want unlimited scans and the five background alerts. The page says the project is a solo Android app, and iOS is not available. ## How AppXpose works Install from Google Play. Free use is 5 scans a week, with no signup and no card. A scan stays on the device until the user taps an app. Metadata requests go to a Cloudflare edge, HMAC-signed, with no name or account. GUARD watches for breach, tracker, permission, removal, and developer-certificate changes. Permission checks are described as every 24h. Billing is through Google Play, and cancel is in Play subscriptions. The method page was last updated August 2026 and says it reflects v7.4.1. ## Key features - On-device DEX and manifest read. The page says bytes never leave the phone for that step. - Deterministic tracker signatures, with Exodus Privacy and community discovery named as sources. - Local App Index of risk scores, tracker lists, and permission audits. - GUARD alerts for breaches, tracker changes, permission changes, app removal, and signing-certificate changes. - Free tier: 5 scans per week, community verdict, and an ad for bonus scans. - GUARD: unlimited scans, up to 50 apps at once, 5 background alerts, daily app diffs, and no ads. - The method page lists 136 Exodus signatures, 137 community signatures, and 270+. ## Pricing As listed on appxpose.app, checked 14 October 2026. Prices can change; see the site for current terms. - Free is €0 including VAT, forever, with 5 scans per week. - The monthly GUARD amount on the card is 9 and 99 including VAT. The year amount is 49 and 99. - GUARD Lifetime is 99 and 99 once. The page says that payment is not a subscription. - Prices include VAT. Google Play sets prices per country, so the exact amount can differ. Cancel anytime in Play subscriptions. ## Facts from appxpose.app, checked 14 October 2026 - The method page says tracker detection is pattern matching, and breach checks use HIBP. - Risk levels are LOW 0-29, MEDIUM 30-59, HIGH 60-79, and CRITICAL 80-100. - Independent and Berlin are on the page. - A community signature is confirmed after the same unknown prefix appears in 3 or more distinct packages. Written from AppXpose's own website ([Homepage](https://appxpose.app/), [Features](https://appxpose.app/how-it-works)). The maker can claim this listing to edit it. ## FAQ ### Does AppXpose upload installed apps? The FAQ says the DEX bytecode analysis runs on the device. Requests to the edge are for cached metadata such as tracker signatures and breach status, HMAC-signed, with no email, no Google account, and no advertising ID. ### What does the free tier include? The card lists 5 scans per week, basic scan results, a community verdict, and an ad for bonus scans, at €0 including VAT. The page also says five scans a week, full results, no signup, and no card. ### What does GUARD add? Unlimited scans, up to 50 apps at once, an App Index with scan history, 5 background alerts, community breach and tracker alerts, daily app diffs, and no ads. The monthly amount is 9 and 99 including VAT, and the year amount is 49 and 99. ### Is there an iOS version? No. The page says the iOS sandbox prevents this kind of bytecode analysis, and AppXpose is Android-only. ### Is the source code public? Not yet. The page says the code is closed and the methodology is documented. It names a plan to open the detection engine after the signature format and scoring inputs stabilize. Contact on the method page is mahere@appxpose.app. --- Source: https://lots.directory/products/appxpose · Machine-readable context by LotsDirectory.