MASVS-PRIVACY

Checklists Updated (June 2025)

The checklists now include all MASTG tests, as well as updated mappings to the new MAS profiles.

MASVS-ID	MASTG-TEST-ID	Control / MASTG Test	Platform	L1	L2	R	P	Status
MASVS-PRIVACY-1		The app minimizes access to sensitive data and resources.
	MASTG-TEST-0206MASTG-TEST-0206	Sensitive Data in Network Traffic Capture	platform:android				profile:P	newstatus:new
	MASTG-TEST-0254MASTG-TEST-0254	Dangerous App Permissions	platform:android				profile:P	newstatus:new
	MASTG-TEST-0255MASTG-TEST-0255	Permission Requests Not Minimized	platform:android				profile:P	placeholderstatus:placeholder
	MASTG-TEST-0256MASTG-TEST-0256	Missing Permission Rationale	platform:android				profile:P	placeholderstatus:placeholder
	MASTG-TEST-0257MASTG-TEST-0257	Not Resetting Unused Permissions	platform:android				profile:P	placeholderstatus:placeholder
MASVS-PRIVACY-2		The app prevents identification of the user.
MASVS-PRIVACY-3		The app is transparent about data collection and usage.
MASVS-PRIVACY-4		The app offers user control over their data.