eHealth Access Pvt Ltd, a healthcare services company, has launched its Android app that connects users to their database of doctors. The company claims to connect the app users to a network of 520+ doctors across India. The app is available for download from the Google Play Store. The company also provides similar services through its website and on phone. Once installed, users need to register on the app by submitting their name, email address, password, and mobile number. Note that users need to select a subscription plan before registration. Currently the app offers 5 paid plans and 1 free plan. Users can initially register by selecting a free plan and later, opt for other paid plans. Security Issue: We noticed that the app sends an email with the password in cleartext notifying about the registration on the service. This could be a major security issue as it indicates that the app stores user passwords in their server database as plain text. In case someone hacks into their database in the future, they could easily get access to user data. Typically, websites are expected to use encrypted passwords in their database. No native Android app We tested the app on our Android handset (Micromax A90S) and found that the app is basically a web based app wrapped into an Android app. Essentially the app gives a poor experience. Features: The app provides users with an option of save their doctors mobile number to consult and dial from within the app, and also connect with the general…
