Field Inspections keeps all data on the device. It has no authentication, server, telemetry or cloud service of its own, so it is not designed to hold regulated or highly sensitive data. SQLite data and stored photos rely on the operating system sandbox and are not additionally encrypted by the app. Operating system device backups (iCloud Backup, Android Auto Backup) can include this data.

Report vulnerabilities privately through GitHub private vulnerability reporting. Do not disclose personal data or exploitable details in public issues. For anything else, contact Folder IT through folderit.net.

This is a static reference repository without a support commitment; reports are reviewed on a best-effort basis.

Treat form input, persisted JSON and selected media as untrusted input. Never add API keys or model credentials to the mobile bundle.

The installed dependency graph reports 14 moderate advisories, propagated mainly from decode-uri-component through routing/query-string and uuid through Xcode/config tooling. No high or critical advisories were reported in this installation. The automatic force fix proposes incompatible Expo/router downgrades and was not applied. Recheck upstream compatible releases before publication; do not describe the graph as vulnerability-free. See URI decoding advisory and UUID advisory.