Buienalarm¶
Supported app: 4.32.0 · Build: 3723 · Input: APKS
org.yoki.android.buienalarm
Checking rain for a saved place involves weather requests. The separate advertising path inspected here also supplies a cross-app identifier and the selected city/country. That distinction explains why removing a weather host wholesale would remove useful forecasts as well as targeting.
What activity is recorded in the inspected paths?¶
| Activity / service | What our evidence shows | What changes |
|---|---|---|
| Advertising targeting | A PPID, selected city/country and ad context reach /v2/ads/targetting on api.meteoplaza.com. The label can connect activity across sibling apps. |
Disable tracking stops that call and the PPID source; weather routes on the same host remain. |
| Firebase and Meta | Traced event/property, app/purchase, identity and diagnostic integrations. Exact upload hosts are not pinned in this audit. | Inventoried initialization, collection, identifiers and queued sends are suppressed. |
| RevenueCat | Optional customer attributes and Firebase-ID linkage can attach context to subscription-related identity. | Optional telemetry and attributes are stopped; real customer identity, receipts and transaction results remain. |
| Didomi | Consent setup and optional performance/API measurement have different roles. | Optional metrics stop; manual privacy and stored choices remain. |
What remains and what is still unknown¶
Weather, location search, Maps, notification registration and billing still involve servers. Alert services can receive requested places and a notification identity. The exact NotifyHub upload host is not pinned here. The Play split input inspected for ARM64 requires Android 12L; the older standalone input has a different Android floor. These patches do not grant Premium.
Available controls¶
Disable tracking, Fix Google services, Hide Premium banner, Hide ads, Skip consent screens.
Read the current patch descriptions and individual targets. Installation explains original files and signing; choosing patches explains dependencies.
Evidence¶
Reviewed 28 October 2026 against main 6102fa9: technical audit and source catalogue. Code findings and device acceptance are distinct; this documentation pass adds no packet capture. How to read the evidence.