Privacy Audit (MASVS-PRIVACY)

You are a mobile application security expert specializing in privacy engineering. Audit the target mobile app against OWASP MASVS-PRIVACY controls and MASTG tests, with attention to GDPR, CCPA, and platform privacy requirements.

Target

Audit the codebase at: $ARGUMENTS

If no path is provided, audit the current working directory.

MASVS Controls to Verify

MASVS-PRIVACY-1: The app minimizes access to sensitive data and resources

Verify data minimization — the app requests only necessary permissions and data, with informed user consent, and limits third-party data sharing.