There are few issues scanned by data theorem on our latest iOS app.
One of them is related to data leakage. I’m new to data theorem and have been trying to understand on what exactly needs to be done to fix them.

Below are details about this particular issue:

Data Dumped to 3rd Party OSS/SDK – Crashlytics

Vulnerable Code:

Data Leakage to https://firebase-settings.crashlytics.com

Stack Trace:

This finding was identified within the following SDKs:
Crashlytics SDK
Firebase Analytics
FirebaseAnalytics

The following code locations initiated the network connection:

CFNetwork

Recommendation:

Due to GDPR and CCPA, any data leaked to third-parties that may include user NPI (NonPublic Personal Information) and PII (Personally Identifiable Information) must be documented in the App’s privacy policy. Please review the raw data dumps above and ensure it does not contain any NPI or PII else documents its use in the App’s privacy policy.
Data Theorem has already completed an initial analysis and if any NPI/PII was found, it would show up as a separate issue.

Any help in fixing such issues is greatly appreciated. Thank you!