Mobile App Risk is Business Risk.
Regulators are watching Enterprise mobile apps. Users demand transparency. Get instant visibility into privacy risks, AI data exposure, dangerous permissions and suspicious network connections across your entire enterprise app portfolio.
Search 2,000+ Enterprise Apps. Know Your Risk in Minutes.
OnePay – Mobile Banking
OnePay – Mobile Banking
More. For your money.
OnePay is a financial technology company, not a bank. Banking services provided by Coastal Community Bank or Lead Bank, Members FDIC. The OnePay CashRewards Mastercard is issued by Synchrony Bank pursuant to a license from Mastercard® International Incorporated. OnePay Debit Card is issued by banking partners Coastal Community Bank or Lead Bank, Members FDIC, pursuant to a license by Mastercard International Incorporated. Mastercard and the circles design are registered trademarks of Mastercard International Incorporated.
To see terms and conditions relating to OnePay’s products, visit www.onepay.com/terms
Eligible deposits requirement met when your OnePay Cash account either (i) receives Direct Deposits totaling $500+ in the current or previous month or (i) had a balance of $5,000+ at the end of the previous month.
‡Cash back is earned as OnePay Points, redeemable as a deposit into a OnePay Cash account pursuant to the OnePay Rewards Terms. See onepay.com/rewards-terms. This reward applies to purchases at U.S. Walmart locations and on Walmart.com only.
**Must be 18 or older. When on, Savings Backup will be used before Fee-Free Overdraft. Overdraft balance is due right away. Eligible transactions are at the discretion of OnePay and may exclude certain transactions (e.g., bill pay, global transfers). See details at onepay.com/overdraft-details.
+Based on a 12 month loan with $25 monthly payments and a 0% APR. You can choose how much you’d like to pay towards your monthly payment, with a minimum of $1. If you choose an amount less than the full monthly payment, the remainder will be paid from the loan proceeds held in your Credit Builder lockbox. Use of the Credit Builder Program does not guarantee that your credit score will improve. Credit score improvement is dependent on your specific circumstances and a variety of factors, including your financial behavior. Failure to make monthly minimum payments on time may negatively impact your credit score. See onepay.com/legal/licenses.
†Cash back is earned as OnePay Points, redeemable as a deposit into a OnePay Cash account pursuant to the OnePay Rewards Terms. Individual reward details can be found in the OnePay app.
∞Subject to credit approval. Cash back is earned as points on purchases made with your OnePay CashRewards Mastercard, which can be redeemed as a statement credit or as a deposit into a OnePay Cash account.
ʌʌOffer is valid for new accounts only and may only be applied once. Cash back is earned as points, which can be redeemed as a statement credit or as a deposit into a OnePay Cash Account. See onepay.com/rewards-terms. for details. Limited time offer. We reserve the right to change or discontinue this offer at any time.
ʌDirect deposit required. Funds availability may vary depending on when your employer sends paycheck data.
++Currency exchange rates vary.
© Copyright 2025 One Finance, Inc.
OnePay – Mobile Banking
Package ID
1494523953
Version
5.26.1
Developer
One Finance, Inc.
Category
Finance
Store Rank
61
App Store Link
View in App StoreDeveloper Privacy Policy
Privacy PolicyObservations Summary:
Permissions Observations
DETECTEDPermissions defined by Apple and Google as dangerous have been observed.
Observed During Analysis
- The app is requesting access to the device’s camera.
- The app is requesting access to the user’s contacts.
- + 7 more
- The app is requesting the ability to authenticate with Face ID.
- The app is requesting access to the user’s location information at all times.
- The app is requesting access to the user’s location information while the app is running in the foreground.
- The app is requesting access to the device’s microphone.
- The app is requesting access to the user’s photo library.
- The app is requesting to send user data to Siri.
- App is requesting permission to use data for tracking the user or the device.
- show less
- See Your App’s Risk Profile
Why Permissions Matter
If not managed properly, dangerous permissions can permit malicious access to sensitive data, and device features.
Privacy Declarations Observations
DISCREPANCY DETECTEDA discrepancy in the declarations was observed, indicating there are conflicts or omissions in the app or component declarations.
Observed During Analysis
- Missing iOS Privacy Manifest
- Missing Accessed API Types Declaration
- + 1 more
- Missing Privacy Tracking Declaration
- show less
- See Your App’s Risk Profile
Why Privacy Declarations Matter
Declarations matter because they provide transparency on how apps collect and use sensitive data. iOS requires Privacy Manifest declarations, while Android requires Data Safety disclosures and manifest permissions.
Sensitive Data Collection and Sharing Observations
SENSITIVE INFO FOUNDThis app collects, stores, or shares information that is often designated as sensitive and private.
Observed During Analysis
- Advertiser Identifier (ADID)
- Identifier for Vendor (IDFV)
- See Your App’s Risk Profile
Why Data Collection and Sharing Matters
If not managed properly private data can expose enterprises, customers, employees and partners to breach and compliance violations.
Network Connections Observations
DETECTEDNetwork analysis has detected communication with external servers and data transfer patterns.
Observed During Analysis
Connected Hostname:
- amazon.com
- apple.com
- + 3 more
- cloudflare.com
- fastly.com
- google.com
- show less
Server Locations:
- Ashburn, Virginia, US
- Boardman, Oregon, US
- + 6 more
- Cupertino, California, US
- Dulles, Virginia, US
- Kansas City, Missouri, US
- Mountain View, California, US
- San Francisco, California, US
- Seattle, Washington, US
- show less
- See Your App’s Risk Profile
Why Network Connections Matter
Uncontrolled communication with external servers by an employee-used app could expose sensitive business data to unauthorized third parties. This unauthorized access can lead to data breaches, regulatory non-compliance, and damage to your business's reputation and financial standing.
AI Observations
NONE DETECTEDNone detected. Further analysis recommended.
- See Your App’s Risk Profile
Why AI Matters
AI features can process sensitive data in unexpected ways, potentially exposing proprietary information or creating liability.
NowSecure provides detailed risk assessments for millions of mobile apps. We Can Help Secure Your App.
All trademarks, logos, and brand names are the property of their respective owners. All company, product, and service names used in this website are for identification purposes only. Use of these names, trademarks, and brands does not imply endorsement.
MARC App Directory