PSA: Do not use the Onavo app by Facebook

A VPN service should adhere to certain standards: ensure that your data remains safe from prying eyes. The Onavo app, owned by Facebook, is a VPN service that collects your: mobile traffic, location, installed/opened apps, visited websites, and more.

On top of that, the visited websites, installed/opened apps, and other information are stored in a plaintext database which can be easily accessed with root.

The Onavo app in the Play Store

Because of violating user privacy and security, the app was removed from Apple’s App Store. As of the time of this writing, it is still available on Google Play. If you happen to use it (or know someone that does), you should take initiative and remove it.

In case you are planning to get a VPN service to protect your privacy, you must consider if they keep your privacy at the top of their priorities. TorrentFreak‘s article on VPNs is an excellent resource when it comes to VPNs, and you can give it a read in case you are planning to get a VPN.

The Onavo app stores all your data in a plaintext database.

Source: Lufas Stefanko