DMI App Tracker Tracker is a tool to detect in a set of APK files predefined fingerprints of known tracking technologies or other software libraries.
DMI App Tracker Tracker is built on top of Exodus, a privacy auditing platform for Android applications: https://exodus-privacy.eu.org/.
First, create a seed list of one or multiple URLs to download the Android application package (APK) files of specific apps of interest. These URLs should be direct links to download their APK files and should not be hidden behind logins or paywalls (i.e., using open repositories like APKPure.com). When in the APKPure store, you may select an app and you can copy the link under 'if the download doesn't start, click here'.
Second, input the seed list of URLs (one per line) and run the tool to download the APK files. It extracts the contents of each downloaded package file and stores them temporarily on a server. Don’t forget to name your result properly (e.g., including your name, a date, and a keyword) for retrieval at a later time. A process log is shown while the tool is running.
Third, the tool analyses the static Java source code of each file included to detect predefined fingerprints of (i) tracking technologies or (ii) any other software libraries referenced in them.
Finally, after successful completion results can be downloaded via the ‘Output’ tab. It outputs a table with a list of input URLs (i.e., APK files) and the tracking technologies or software libraries detected in them. Please note: This tool stores previous jobs under the ‘Past Jobs’ tab, with the job name provided by the researcher.