> It's not enough to look at what frameworks an app uses with some rubbish toolĮxactly and I wish some of these security 'experts' that I've invariably never heard of before would understand that. Turning off push notifications on a Bitwarden server will disable using the push relay server if you want to self-host. Please note, Firebase and HockeyApp are removed completely from the F-Droid build if you are interested in using that option. The HockeyApp is used for crash reporting. In the mobile app, the Firebase script is used for push notifications. Q: What third-party scripts, libraries, and services are used?Ī: Currently, we load third-party payment scripts from Stripe and PayPal on payment pages in the Web Vault. It's not enough to look at what frameworks an app uses with some rubbish tool, you also have to look at what exactly it does with it, and anyone can do that, because Bitwarden is open source and anyone can convince themselves that nothing is tracked there:

They only use App Center to get crash reports and Firebase only uses the notification API for push notifications.

Keepass for android