Languages: English · العربية · Čeština · Deutsch · Español · فارسی · Français · हिन्दी · Bahasa Indonesia · Italiano · 日本語 · 한국어 · Nederlands · Polski · Português · Русский · Svenska · ไทย · Türkçe · Українська · Tiếng Việt · 中文

VD Google is a privacy tool. It runs as root and reads sensitive state, so security reports are taken seriously.

Please report security issues privately, not in a public issue:

• E-mail vd.priv8@pm.me.
• Describe the problem, the affected version, and how to reproduce it.
• If it concerns data exposure, describe the class of problem; you do not need to attach a working exploit.

You will get a response as soon as possible. Please give a reasonable window to fix the issue before any public disclosure.

Because of what VD Google promises, these are especially important:

• Anything that would make the app reach the network, or send any data off the device.
• Anything that would leak personal data into an export (a phone number, credential, message content, contact name, or a per-identity fingerprint).
• Anything that lets the one sanitizing action change state without confirmation or without being logged.

• A reading that looks "wrong" but is the honest truth (for example, carrier-side RCS lines reading No while RCS runs on Google's backend). See the user guide.
• The absence of a Play Integrity verdict. That verdict is not on the device and VD Google will not invent it.

Only the latest released version is supported. Please reproduce on the latest build before reporting.

This documentation was generated with Claude (Anthropic) and is maintained by VD171. Corrections and improvements are welcome; see CONTRIBUTING.md.