← Back to home·Back to “Security”
NOIR Android Privacy Audit
Plug in an Android phone and audit it: permissions, reporting endpoints and data flows, plus reversible fixes.
Visit tool →
Details
NOIR is a desktop Android privacy audit tool (MIT, about 1,500 GitHub stars, at version 0.1.1 when we checked on 2026-11-03) that answers one concrete question: what can the apps on this phone collect, and where might they send it? Over adb it reads the connected Android device's app inventory and permissions, extracts network endpoints from APKs right on the device (only a few KB come back — the whole package is never pulled to your computer), then classifies by vendor and category (telemetry, ads, location, keyboards and more), scores the risk, and pairs “data it can read” with “hosts it can reach” into data flows. It also checks manifests for exported components, cleartext traffic, backup flags and debuggable builds, and can deep-scan a single app with jadx when needed. Output includes a structured report, tiered domain lists ready for DNS blocking, an action plan and rollback commands. The default run is fully read-only, and even applied fixes only change app-ops — each one reversible. Honest caveats: it is very new (created 2026-10-31, version 0.1.1), Android-only, and needs USB debugging plus adb; its evidence is static — it proves an app has a capability and an endpoint in its code, not that a particular transfer actually happened; and the unsigned builds will trip Gatekeeper or SmartScreen once on first launch.
Who it's for
Android users — especially on Chinese vendor phones — who want to know where their apps send data, and who are comfortable enabling USB debugging for a privacy checkup.
18btc Crypto Tools Navigator · Our Take
“Read-only by default, with a rollback command for every fix — that is the design choice that earns trust. But the version is very new: try it on a spare phone first, or back up thoroughly before applying fixes to your daily driver.”