I need to know how to make a Bt3 android app more secure because I've done an app for a corporate which needs a new version published to google play store but the corporate is getting my apk file analyzed by a 3rd party company before they will publish it and it keeps being rejected because they say "Sends Sensitive Data without Encryption – The application transmits the sensitive data without proper encryption or as a query parameter. This vulnerability allows an adversary to eavesdrop the data" I am on self host and have a ssl certificate installed and the report to cloud and configuration url is set as https:// in the control panel. Currently the Url merge fields are set as the default in the report to cloud i.e."deviceId=[deviceId]&deviceLatitude=[deviceLatitude]&deviceLongitude=[deviceLongitude]&deviceModel=[deviceModel]&userId=[userId]" and not sure if this is part of the problem and could delete most of these fields except for userid because I use a login screen. If updating the app to BT4 will fix this then I will but I really need help from the experts because I am a complete novice and not sure what I need to do and although my issue is with Android now i think the same thing is going to happen with ios when I need to update it later on.

I wish I could help with Android, but again, I just haven't opened up Studio in a while. I'm updating the iOS side for the moment. That said, here's what I've done in the BT_application.m file for the Report To Cloud method. Note the new 'doSomething' method created to handle the returned data. And all you're really going to do is substitute your URL with an https address (if applicable). https://pastebin.com/1bL2jdrd Hope this helps. Cheers! -- Smug

i have a ssl certificate installed but not working!!