In the details for potential URL in memory, it says that's for .onion address.
Thank you for posting the report, after I read through it, everything to me is clean and clear. The FDroid apk does not communicate with any outside resource that is not part of the anonymous network.
The Github version relies on Google, and to me nothing in the report suggeats that the FDroid version communicates with Google services.
I woud still like for you to do a scan on the FDroid SimpleX apk to verify the difference for yourself instead of whatever I say about it.
The link for F-Droid security issues is goijg on 3 years old, have you looked at the code xhanges for F-Droid since then?
For using Obtainium, how do you avoid or block all apps from Github that depend on GCM, Firebase, or Google services? That's wh I uae F-Droid and disable all anti-features so those apps are never listed, even if I search for an app that has Google dependancies, F-Droid will say that app does not exist or is not listed, as long as all anti-features is disabled.
I can't speak to that with a familiar level with the code, I can only presume or guess. All I will say is that is why I never install any app from Github or Gitlabs, because there is no third party verification of the code for releases on those sites.
I only use F-Droid after disabling all anti-features in Settings and then install apps that I know are 100% clean from all dependancies.
Download the SimpleX apk from F-Droid website and then run that to see what it says for any difference in the results.
Is that based on the F-Droid version of SimpleX from the native F-Droid repository?
Your argument is purely ideological and reflection of your lack of experience travelling various countries that do not speak English. For example, go to a country where 100% of all business, companies, and offices, use Whatsapp because it's the most stable form of phone service they have so they don't have to pay for each phone call and pay for each text message.