Is Nike MeaVana safe?
Nike MeaVana sends the IP Info utility's public IP lookup to ip-api.com over cleartext HTTP.
When a user opens the IP Info utility, the extension requests api.ipify.org to determine the public IP address and then calls http://ip-api.com/json/{ip}. That second request places the IP address in the URL over unencrypted HTTP, so the IP address is visible to ip-api.com and any network observer on that request path.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itMeaVana - 1 - 6 other listings from the same operator, none carrying a finding
MeaVana - 1 - 6 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
6 other listings published from this account, 27k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Nike MeaVana contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- ip-api.comwidely used
Nike MeaVana sends data to ip-api.com. A widely used service: 62 other extensions we have analysed send data here.
- api.ipify.orgwidely used
Nike MeaVana sends data to api.ipify.org. A widely used service: 41 other extensions we have analysed send data here.