Numbers 3.2 (iOS / App Store)

175x175bb (53)

This application is available for iOS. This app is designed to be a spreadsheet one exclusively for iOS. The latest build was released on Jun 13, 2017. Our latest check was performed on Mar 26th, 2017

Findings Summary

Our examination revealed total 11 items, where were 6 DAR items and 5 DIT items found. Among DAR items were found 0 worst items, 3 bad items, 3 good items, and 0 best items. Among DIT items were found 0 worst items, 4 bad items, 1 good item, and 0 best items.

Below you find 2 infographics summarizing what we described above. Each image provides information about both DAR and DIT items.

This slideshow requires JavaScript.


Everything presented below is related to well-known CWEs, such as Sensitive data leakage [CWE-200], Unsafe sensitive data storage [CWE-312], Unsafe sensitive data transmission [CWE-319]. You can read more about it here.

Now let’s go deeper and examine each data item’s protection level.

 

Application Description

Let’s cite the description of this application below:

Numbers is the most innovative spreadsheet app ever designed for a mobile device. Created exclusively for iPad, iPhone, and iPod touch, Numbers includes support for Multi-Touch gestures and Smart Zoom so you can create powerful spreadsheets using just your fingers.
Start with one of over 30 Apple-designed templates for your home budget, checklist, invoice, mortgage calculator, and more. Choose from over 250 powerful functions. Tap to add tables, charts, text, and images anywhere on the free-form canvas. Touch and drag your finger to reorder columns and rows and to resize tables. Double-tap a cell to bring up the intelligent keyboard that helps you enter text, formulas, dates and times, or duration. Animate your data with interactive column, bar, scatter, and bubble charts. And with an all-new calculation engine, Numbers is faster than ever before.
With iCloud built in, your spreadsheets are kept up to date across all your devices. And with the release of real-time collaboration, your team will be able to work together at the same time on a Mac, iPad, iPhone, or iPod touch — even on a PC using iWork for iCloud.
Collaborate with others at the same time

  • With real-time collaboration, your whole team can work together on a spreadsheet at the same time
  • Collaboration is built right in to Numbers on the Mac, iPad, iPhone and iPod touch
  • PC users can collaborate too, using Numbers for iCloud
  • Share your document publicly or with specific people
  • You can easily see who’s currently in the document with you
  • View other people’s cursors to follow their edits

Get started quickly

  • Over 30 Apple-designed templates give your spreadsheets a beautiful start
  • Double-tap a cell to access the intelligent keyboard to add text, formulas, dates and times, and more
  • New action menu keeps most common tasks one tap away
  • Reorder columns and rows, and resize tables, with a touch and a drag
  • Import and edit Microsoft Excel and CSV files using Mail, a WebDAV service, or iTunes File Sharing
  • Quickly open password-protected spreadsheets using Touch ID on supported iPhones

Beautiful spreadsheets

  • Place tables, charts, text, and images anywhere on the free-form canvas
  • Update tables, charts, text, and images using beautiful preset styles
  • Insert photos and video with the Media Browser
  • Create a form to quickly enter data on the go
  • Edit down to the pixel with rulers, alignment guides, and powerful graphics tools

Data uncrunched

  • Choose from over 250 powerful functions
  • Get built-in help and sample formulas for each function
  • Easily add stock information to spreadsheets
  • Sort columns in ascending or descending order
  • Hide or unhide rows and columns
  • Turn filters on and off in imported spreadsheets
  • Insert gorgeous 2D and 3D charts
  • Animate data with new interactive column, bar, scatter, and bubble charts
  • Change values in cells using sliders, steppers, checkboxes, pop-ups, and star ratings
  • Use Undo to go back through your previous changes

iCloud

  • Turn on iCloud so you can access and edit your spreadsheets from your Mac, iPad, iPhone, iPod touch, and iCloud.com
  • Access and edit your spreadsheets from a Mac or PC browser at http://www.icloud.com with Numbers for iCloud
  • Numbers automatically saves your documents as you make changes

Share a copy of your work

  • Use AirDrop to send your spreadsheet to anyone nearby
  • Quickly and easily share a link to your work via Mail, Messages, Twitter, or Facebook
  • Export your spreadsheet to CSV, PDF, and Microsoft Excel
  • Use “Open in Another App” to copy spreadsheets to apps such as Dropbox
  • Print wireleSSLy with AirPrint, including a single tab, or all tabs

Some features may require Internet access; additional fees and terms may apply.
Numbers does not include support for some Chinese, Japanese, or Korean (CJK) text input features such as vertical text.

 

Protection levels.

Locally stored data (Data-at-Rest, DAR).

Locally stored data groups include Media Information, Documents Information, Application Information.
The average DAR value is 5.00 points (7.00 points of system protection and 3.00 points of own protection). It is higher than a typical value (3.5 points, where’s 7 points of system protection and 0 points of own protection).

Items’ GROUP #1 with average value 6.50 points (7 points of system protection, 6 points of own protection) means data protection levels have following definitions. Frankly talking, protection and privacy issues are still possible but might involve interaction with an app code where system protection level means – root/jailbreak is required but not possible without wiping device data, and own protection level means – data is not available in backups.

– Screen Snapshots (‘Media Information’ Group) – Screenshots of your device screen running certain apps; common as an iOS app multitasking feature (app swipes) or browser tab swipes. This data item related to mentioned group meant to be any data like photo, image, video, audio,

– Sync Documents (‘Documents Information’ Group) – Documents synchronized or locally stored on your device as is or converted into another file formats (like.pdf or set of separated jpg file per each .pdf file. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Media Data (‘Documents Information’ Group) – Any info like images, audios, videos, media notes, etc. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format

Items’ GROUP #2 with average value 3.50 points (7 points of system protection, 0 points of own protection) means data protection levels have following definitions. Frankly talking, extra data found that shouldn’t be accessed where system protection level means – root/jailbreak is required but not possible without wiping device data, and own protection level means – stored as is.

– Document Details (‘Documents Information’ Group) – Common info about documents synchronized or stored locally (properties like size, date and time, etc.). This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Document List (‘Documents Information’ Group) – The list of documents stored local or synchronized over the Internet. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Application Configs (‘Application Information’ Group) – Different configuration files created by your app, perhaps app permissions. This data item related to mentioned group meant to be any info related to the app, app settings, including installed apps or installers

Also, keep in mind, using jailbroken device means the system protection level is 0 points and you’re using out-of-date iOS < 8.3 the system protection level is 2 points. If some data marked as shareable via iTunes, then the system protection level is 4 points.

Transferred data (Data-in-Transit, DIT).

Transferred data groups include Documents Information, Account Information, Application Information.
The average DIT value is 4.80 points (5.00 points of system protection and 4.60 points of own protection). It is higher than a typical value (4 points, where’s 4 points of system protection and 4 points of own protection).

Items’ GROUP #1 with average value 4.50 points (5 points of system protection, 4 points of own protection) means data protection levels have following definitions. Frankly talking, data available if it’s allowed only and may require user action where system protection level means – some techniques are available to developers to keep connection bypassing system settings, like proxy settings, etc., and own protection level means – bypassed by fake/stolen root certificates.

– Device Data (‘Documents Information’ Group) – Device ID, Device Name, Device OS Name and Version, and jailbroken/root status. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Document Details (‘Documents Information’ Group) – Common info about documents synchronized or stored locally (properties like size, date and time, etc.). This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format,

– Account Data (‘Account Information’ Group) – Basic info about account like name, a list of sub-account (e.g. financial or other) and some linked data like a phone number. This data item related to mentioned group meant to be any info related to profiles, basic credential IDs like email or username or phone number plus some more info depends on applications,

– Application Configs (‘Application Information’ Group) – Different configuration files created by your app, perhaps app permissions. This data item related to mentioned group meant to be any info related to the app, app settings, including installed apps or installers

Items’ GROUP #2 with average value 6.00 points (5 points of system protection, 7 points of own protection) means data protection levels have following definitions. Frankly talking, protection and privacy issues are still possible but might involve interaction with an app code where system protection level means – some techniques are available to developers to keep connection bypassing system settings, like proxy settings, etc., and own protection level means – tricks to bypass sniffing (hardly to be or can’t be patched to bypass), including non-common or unsupported protocols.

– Sync Documents (‘Documents Information’ Group) – Documents synchronized or locally stored on your device as is or converted into another file formats (like.pdf or set of separated jpg file per each .pdf file. This data item related to mentioned group meant to be any documents stored locally, uploaded, downloaded, synchronized in any file format

Keep in mind if you’re using out-of-date iOS < 9.0, the system level equals 2 points instead of 4. It means your data can be stolen without involving your actions.

Privacy Policy

Full application privacy policy is available here.

You may find privacy policy details proceeding the link above to compare developer’s vision on data protection with our results.