# BetterMe

状态：active
Platform：android
Package：com.gen.workoutme
Version：11.19.0
Opportunity：2026-06-10-betterme

## 摘要

- 包类型：xapk，inner APK 数：17
- 引擎 / 框架：native
- SDK 线索：appsflyer, firebase, onesignal, revenuecat
- Endpoint candidates：80
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.gen.workoutme（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 72 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 80 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 14 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: appsflyer, firebase, onesignal, revenuecat（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_COARSE_LOCATION`
- `android.permission.ACCESS_FINE_LOCATION`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.ACTIVITY_RECOGNITION`
- `android.permission.ANSWER_PHONE_CALLS`
- `android.permission.BLUETOOTH`
- `android.permission.BLUETOOTH_ADMIN`
- `android.permission.BLUETOOTH_ADVERTISE`
- `android.permission.BLUETOOTH_CONNECT`
- `android.permission.BLUETOOTH_SCAN`
- `android.permission.CAMERA`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.FOREGROUND_SERVICE_DATA_SYNC`
- `android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_APP_BADGE`
- `android.permission.READ_CALL_LOG`
- `android.permission.READ_CONTACTS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.READ_MEDIA_VISUAL_USER_SELECTED`
- `android.permission.READ_PHONE_STATE`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.RECORD_AUDIO`
- `android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS`
- `android.permission.SCHEDULE_EXACT_ALARM`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `android.permission.health.READ_BODY_FAT`
- `android.permission.health.READ_EXERCISE`
- `android.permission.health.READ_HEART_RATE`
- `android.permission.health.READ_HEART_RATE_VARIABILITY`
- `android.permission.health.READ_NUTRITION`
- `android.permission.health.READ_SLEEP`
- `android.permission.health.READ_STEPS`
- `android.permission.health.READ_TOTAL_CALORIES_BURNED`
- `android.permission.health.READ_WEIGHT`

### 组件

- Activities：androidx.compose.ui.tooling.PreviewActivity, com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.gen.betterme.base.ViewPermissionUsageActivity, com.gen.betterme.base.sections.home.HomeActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.onesignal.NotificationOpenedActivityHMS, com.onesignal.core.activities.PermissionsActivity, com.onesignal.notifications.activities.NotificationOpenedActivity, com.onesignal.notifications.activities.NotificationOpenedActivityAndroid22AndOlder, io.getstream.chat.android.compose.ui.attachments.preview.MediaGalleryPreviewActivity, io.getstream.chat.android.compose.ui.attachments.preview.MediaPreviewActivity, io.getstream.chat.android.ui.common.feature.documents.AttachmentDocumentActivity, io.getstream.chat.android.ui.feature.channels.ChannelListActivity, io.getstream.chat.android.ui.feature.gallery.AttachmentActivity, io.getstream.chat.android.ui.feature.gallery.AttachmentGalleryActivity, io.getstream.chat.android.ui.feature.gallery.AttachmentMediaActivity, io.getstream.chat.android.ui.feature.messages.MessageListActivity, io.intercom.android.sdk.activities.IntercomCarouselActivity, io.intercom.android.sdk.activities.IntercomNoteActivity, io.intercom.android.sdk.activities.IntercomPostActivity, io.intercom.android.sdk.activities.IntercomSheetActivity, io.intercom.android.sdk.helpcenter.articles.IntercomArticleActivity, io.intercom.android.sdk.helpcenter.search.IntercomArticleSearchActivity, io.intercom.android.sdk.lightbox.LightBoxActivity, io.intercom.android.sdk.m5.IntercomRootActivity, io.intercom.android.sdk.m5.bubble.IntercomBubbleActivity, io.intercom.android.sdk.post.PostActivityV2, io.intercom.android.sdk.survey.ui.IntercomSurveyActivity, io.intercom.android.sdk.ui.preview.ui.IntercomPreviewActivity, zendesk.classic.messaging.MessagingActivity, zendesk.support.guide.HelpCenterActivity, zendesk.support.guide.ViewArticleActivity, zendesk.support.request.RequestActivity, zendesk.support.requestlist.RequestListActivity
- Services：androidx.appcompat.app.AppLocalesMetadataHolderService, androidx.camera.core.impl.MetadataHolderService, androidx.health.platform.client.impl.sdkservice.HealthDataSdkService, androidx.media3.exoplayer.scheduler.PlatformScheduler$PlatformSchedulerService, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.gen.betterme.bracelets.notifications.BandNotificationsService, com.gen.betterme.media.videos.download.store.service.VideosDownloaderService, com.gen.betterme.pushes.service.PushMessagingService, com.gen.betterme.trainings.screens.workout.distance.service.DistanceWorkoutService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.google.mlkit.common.internal.MlKitComponentDiscoveryService, com.onesignal.core.services.SyncJobService, com.onesignal.notifications.services.HmsMessageServiceOneSignal, com.realsil.sdk.dfu.DfuService, io.getstream.android.push.firebase.ChatFirebaseMessagingService, io.intercom.android.sdk.fcm.IntercomFcmMessengerService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.appsflyer.SingleInstallBroadcastReceiver, com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver, com.facebook.CurrentAccessTokenExpirationBroadcastReceiver, com.gen.betterme.fasting.notifications.FastingReminderReceiver, com.gen.betterme.featurepurchases.sections.notifications.MonetizationReminderReceiver, com.gen.betterme.mealplan.receivers.ShareChosenReceiver, com.gen.betterme.reminderscommon.notifications.workout.WorkoutReminderReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver, com.onesignal.notifications.receivers.BootUpReceiver, com.onesignal.notifications.receivers.FCMBroadcastReceiver, com.onesignal.notifications.receivers.NotificationDismissReceiver, com.onesignal.notifications.receivers.UpgradeReceiver, io.getstream.chat.android.client.receivers.NotificationMessageReceiver, io.intercom.android.sdk.m5.push.ConversationReplyReceiver, zendesk.support.DeepLinkingBroadcastReceiver
- Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider, com.facebook.internal.FacebookInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.squareup.picasso.PicassoProvider, io.getstream.android.push.delegate.AndroidPushDelegateProvider, io.getstream.chat.android.ui.common.StreamFileProvider, io.intercom.android.sdk.IntercomFileProvider, io.intercom.android.sdk.IntercomInitializeContentProvider, org.jetbrains.compose.resources.AndroidContextProvider, zendesk.core.MediaFileProvider, zendesk.support.SupportSdkStartupProvider, zendesk.support.guide.GuideSdkStartupProvider

## SDK / Endpoint

### SDK

- `appsflyer`
- `firebase`
- `onesignal`
- `revenuecat`

### Endpoint candidates

- http://www.apache.org/licenses/
- https://cdn.cfr.betterme.world/weightloss/image/84da75e7aacee1785d35817a43571d09/source.png
- https://cdn.cfr.betterme.world/weightloss/image/7e6cf264ece5e9d03e483e3bb7373c33/source.png
- https://cdn.cfr.betterme.world/weightloss/image/73a45bacccdc599512fa83e51238a6fb/source.png
- https://cdn.cfr.betterme.world/weightloss/image/3285ac0ccec625b01dc54953ccac4eca/source.png
- https://cdn.cfr.betterme.world/weightloss/image/45289bc79d58421e1f7676c8649e63d0/source.png
- https://cdn.cfr.betterme.world/weightloss/image/cc165b4d459a523712b9223f2bc04bd0/source.png
- https://cdn.cfr.betterme.world/weightloss/image/d9d6f7cb19960b204073efbc3606eef6/source.png
- https://cdn.cfr.betterme.world/weightloss/image/8814f6823f187354a60f9c7c1b9617ae/source.png
- https://cdn.cfr.betterme.world/weightloss/image/5d4c5d2165a93a1a646f6d991b1ae710/source.png
- https://cdn.cfr.betterme.world/weightloss/image/6490b5dce8efe7d3157140d5bf814a4f/source.png
- https://cdn.cfr.betterme.world/weightloss/image/ceb707e877a2ce3d074106fde661427b/source.png
- https://cdn.cfr.betterme.world/weightloss/image/edbfe4e7e0864687ca1d8ecb810e12c0/source.png
- https://cdn.cfr.betterme.world/weightloss/image/b72215a2b64a3789d6f295bca6dcd0a2/source.png
- https://cdn.cfr.betterme.world/weightloss/image/541613c743c82ef7ce70c46068b4637b/source.png
- https://cdn.cfr.betterme.world/weightloss/image/c6b85d38acc4a06326a7fbaf2fff4675/source.png
- https://cdn.cfr.betterme.world/weightloss/image/003b15f989b6777c501f38145a83fa58/source.png
- https://cdn.cfr.betterme.world/weightloss/image/662dd1ba2ef90c2774e9ba14c778ee8b/source.png
- https://cdn.cfr.betterme.world/weightloss/image/778470d2ee953cc92f18bb6420b0366f/source.png
- https://cdn.cfr.betterme.world/weightloss/image/eceacf3e06c8775038ac7d9b1adbbc79/source.png
- https://cdn.cfr.betterme.world/weightloss/image/4d62831af35d020718f7f9a9cda1f24e/source.png
- https://cdn.cfr.betterme.world/weightloss/image/7de6c4df9a96557da828d2ef8976bec5/source.png
- https://cdn.cfr.betterme.world/weightloss/image/f4bd5894d6a7099aefd5aa6beea64c89/source.png
- https://cdn.cfr.betterme.world/weightloss/image/032fb2aacf9bee1266081203fbee1709/source.png
- https://cdn.cfr.betterme.world/weightloss/image/9a3c0242da26f26dee130c0ccbcd1bd2/source.png
- https://cdn.cfr.betterme.world/weightloss/image/2fc6496062f219ab2a7c939dbad70f10/source.png
- https://cdn.cfr.betterme.world/weightloss/image/f976910561f1ebb3e62f7588f4b9c263/source.png
- https://cdn.cfr.betterme.world/weightloss/image/f7db428bc762ad206293da4623a7ef2a/source.png
- https://cdn.cfr.betterme.world/weightloss/image/b2db65917aa2412390dc9a0a75cf2e6d/source.png
- https://cdn.cfr.betterme.world/weightloss/image/1db72b24c0ebf97bc0259e864d8b8a37/source.png
- https://cdn.cfr.betterme.world/weightloss/image/de9c3225de17c38917e399e891b74bf1/source.png
- https://cdn.cfr.betterme.world/weightloss/image/9e1ba7a973acf9b7f80c41618c47196e/source.png
- https://cdn.cfr.betterme.world/weightloss/image/c0c7bd0ebcafdcbe6c2809492a25b67f/source.png
- https://cdn.cfr.betterme.world/weightloss/image/ab453a99f25a3705d9fa617507c0852a/source.png
- https://cdn.cfr.betterme.world/weightloss/image/d4bdab953a9e46c78ab60b259491a48c/source.png
- https://cdn.cfr.betterme.world/weightloss/image/f849e26677ade87d35172b608b2e5a2e/source.png
- https://cdn.cfr.betterme.world/weightloss/image/5c83b4194989708bc8a9d5e31b728729/source.png
- https://cdn.cfr.betterme.world/weightloss/image/d65a92a8d758fc32a98ebc905b4acaf4/source.png
- https://cdn.cfr.betterme.world/weightloss/image/e8654b6711b42b5f0d21c08911558d1d/source.png
- https://cdn.cfr.betterme.world/weightloss/image/c1d844d1151e3632bb3287161bab3d62/source.png

## Warnings

- apktool manifest decode skipped 16 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 联系人权限存在，后续需重点验证权限解释、备份、撤销和删除前确认。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。
