Matcha is a tool developed as part of a research project led by Tianshi Li at Carnegie Mellon University. The design, implementation, and evaluation of the tool is advised by faculty members at CMU including Jason Hong, Yuvraj Agarwal and Lorrie Cranor.

Matcha does all its code analysis on the machine running the IDE, and it doesn’t collect any data about you or your app. Its sensitive API detection and third-party SDK data use detection is intended to help you improve your understanding of your app’s data collection and sharing practices and the results may not be exhaustive. You are responsible for verifying the generated CSV correctly represents your app’s data collection and sharing practices. The information provided on this website and in our tool is not intended to, and does not constitute legal advice.

Should you have any feedback or comment for the authors, please create an issue on GitHub, or send an email to tianshil@cs.cmu.edu.