Skip to content
  • Tech Dev NotesTech Dev Notes
Apps
  • Lookup
  • Compare
Market movement
  • Charts
  • Rankings
Visual proof
  • Screens
  • Store listings
  • Icons
Stacks and releases
  • Tech stacks
  • Tool releases
  • Developers
More
  • X feature flags
  • Grokipedia
  • Grok companions
  • Blog
  • Follow on X
ChartsRankingsMoversCompareLookupScreensTech stacksReleases

© 2026 Tech Dev Notes

RSSAboutAPIStatusSecurityPrivacyTermsSitemap@techdevnotes
Sam's Club: Shopping & Savings app icon

Live from Google Play

Sam's Club: Shopping & Savings

Sam's Club
Open in Google Play(opens in new tab)Developer site(opens in new tab)RSS feed

Rating

4.8 (990,687)

Price

Free

Installs

10M+ installs

Version

v26.9.40

PassiveTech stackIcons
Store ProfileApp IconsBuild Stack

Build stack

Sam's Club: Shopping & Savings Android tech stack

Android Kotlin app using Jetpack Compose, ARCore/Filament, on-device TFLite barcode ML, SQLCipher, and SamsClub first-party backends

v26.6.20 · latest

Languages

3

Java · Kotlin

Third-party SDKs

37

18 categories

Permissions

32

18 native libs

Signals

77

capabilities, APIs, fonts

Analyzed June 19, 2026·Bundle com.rfi.sams.android·Detection observed
Built withJava146Kotlin143JJetpack Compose117BBranch53Firebase Analytics118Google App Measurement94Google Mobile Ads (AdMob)101CCrashlytics6CCredential Manager58Firebase Auth16Google Sign-InKKtor33
SectionsRuntimeSDKsAndroid buildSignals

Analysis

What the stack reveals

An automated read of the signals detected on this page - each point links to the evidence below.

On-device ML for barcode detection

On-device ML

The app bundles three TFLite models including barcode_ssd_mobilenet_v1_dmp25_quant.tflite and oned models, along with ML Kit, for on-device ML inference.

barcode_ssd_mobilenet_v1_dmp25_quant.tflite · oned_auto_regressor_mobile.tflite · ML Kit (barcode/vision)

ARCore and Filament for AR/3D

Notable

The app ships ARCore native libraries and Filament for 3D, plus custom barcode and image watermark natives.

libarcore_sdk_c.so · libarcore_sdk_jni.so · libfilament-jni.so · libImageBarcode.so

Secure auth and encrypted storage

Security

The app uses Android Keystore, biometric auth, and SQLCipher for secure authentication and storage.

Android Keystore · Biometric auth · SQLCipher · libsqlcipher.so

Signals↓

Jetpack Compose UI with Lottie

Interface

The app uses Jetpack Compose and Material Components for UI, with Lottie for animations and Glide for images.

Jetpack Compose · Lottie · Glide · Material Components

Frameworks↓

First-party SamsClub backend hosts

Backend & API

The app references first-party hosts app.samsclub.com, identity.samsclub.com, and sams-mobile-core-firebase-prod.firebaseio.com.

app.samsclub.com · identity.samsclub.com · sams-mobile-core-firebase-prod.firebaseio.com

Signals↓

Multi-provider analytics and tracking

Analytics

The app integrates Branch, AppsFlyer, Urban Airship, and Firebase for analytics, attribution, and push messaging.

Branch · AppsFlyer · Urban Airship · Firebase Analytics

Build

Build & platform

Android SDK levels, supported ABIs, and signing scheme from the Android app.

Min SDK

28

Target SDK

35

ABIs

1

arm64-v8a

Signing

v2 · v3

Common Name: samsclub

Manifest

App components

Activities, services, broadcast receivers, and content providers declared in the manifest.

Activities

127

Services

26

Receivers

22

Providers

7

Exported (14)

activity:androidx.activity.ComponentActivityactivity:androidx.compose.ui.tooling.PreviewActivityactivity:androidx.test.core.app.InstrumentationActivityInvoker$BootstrapActivityactivity:androidx.test.core.app.InstrumentationActivityInvoker$EmptyActivityactivity:androidx.test.core.app.InstrumentationActivityInvoker$EmptyFloatingActivityactivity:com.google.firebase.auth.internal.GenericIdpActivityactivity:com.google.firebase.auth.internal.RecaptchaActivityactivity:com.walmart.glass.integration.splash.SplashActivityreceiver:androidx.profileinstaller.ProfileInstallReceiverreceiver:androidx.work.impl.diagnostics.DiagnosticsReceiverreceiver:com.google.firebase.iid.FirebaseInstanceIdReceiverservice:androidx.work.impl.background.systemjob.SystemJobService

Manifest

Permissions

32 permissions requested in the manifest.
android.permission.ACCESS_ADSERVICES_AD_IDandroid.permission.ACCESS_ADSERVICES_ATTRIBUTIONandroid.permission.ACCESS_ADSERVICES_TOPICSandroid.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.CAMERAandroid.permission.CHANGE_NETWORK_STATEandroid.permission.CHANGE_WIFI_STATEandroid.permission.DETECT_SCREEN_CAPTUREandroid.permission.FOREGROUND_SERVICEandroid.permission.FOREGROUND_SERVICE_LOCATIONandroid.permission.HIDE_OVERLAY_WINDOWSandroid.permission.INTERNETandroid.permission.MODIFY_AUDIO_SETTINGSandroid.permission.POST_NOTIFICATIONSandroid.permission.READ_EXTERNAL_STORAGEandroid.permission.READ_PHONE_STATEandroid.permission.RECORD_AUDIO

Native

Native libraries

Bundled native (.so) libraries - NDK code and cross-platform runtimes.
libandroidx.graphics.path.solibarcore_sdk_c.solibarcore_sdk_jni.solibare-detection.solibbarhopper_v3.solibdatastore_shared_counter.solibfilament-jni.solibfilament-utils-jni.solibgltfio-jni.solibimage_processing_util_jni.solibImageBarcode.solibImageWatermark.solibsqlcipher.solibsurface_util_jni.solibTMXAuthentication-8.0-96-jni.solibTMXDeviceSecurityHealth-8.0-96-jni.solibTMXProfiling-8.0-96-jni.solibwalmart_glass_nativelib.so

API

API surface

Endpoints, base URLs, and URI schemes recovered from the DEX string pool.

Base URLs

https://app.samsclub.com/authhttps://app.samsclub.com/mfa

API endpoints

/account//account/A/account/api/p/account/c/account/communications/account/config/a/account/config/b/account/config/j/account/config/k/account/create/isac/account/electrode/api/identity//account/graphql/account/model/e/account/model/l/account/model/p/account/orders/account/plus/offers/account/repository/model/a/account/repository/model/B/account/repository/model/i

URI schemes

amznandroid-appandroid-keystoreandroid.resourcecashiconsentdnsftpgpspnintentmarketmocked-schemepagenopprodidrawresourcesamsclubwalmartwalmart1hwss

Signals

Capability & security signals

Behaviors inferred from DEX type descriptors - WebView bridges, dynamic code loading, reflection, crypto, keystore, and more.
Android KeystoreBiometric authClassLoader useDynamic code loading (DexClassLoader)Play Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionSymmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Security

Potential secrets detected

String patterns matching credentials/keys found by static scanning. Counts only - values are never published.
google api key: 1

Build

Build & platform

Compiler, target OS, supported device families, and localization footprint detected from the bundle.

Devices

Android

Runtime

Languages & runtimes

Primary runtimes and language signatures used by the app.
C/C++ (native)
142
Java
146
Kotlin
143

Dependencies

Third-party SDKs

Grouped by purpose. Select any SDK to see other tracked apps that use it; open the ↗ link for its source.
37 of 37 SDKs
SDKCategoryVendorVersionAppsSource
BranchDeep linking and mobile attribution.AnalyticsBranch-53
Firebase AnalyticsApp usage and event analytics from Firebase.AnalyticsGoogle-118
Google App MeasurementGoogle Analytics for Firebase event measurement substrate.AnalyticsGoogle-94
Google Mobile Ads (AdMob)AdMob mobile advertising for Android.AdsGoogle-101
CrashlyticsReal-time crash reporting from Firebase.Crash & PerformanceGoogle-78
Credential ManagerUnified passkey/password/federated sign-in API (Jetpack).AuthenticationGoogle-58
Firebase AuthAuthentication--16
Google Sign-InGoogle account authentication for Android.AuthenticationGoogle-140
KtorKotlin asynchronous HTTP client/server framework.NetworkingJetBrains-33
OkHttpHTTP client for Android and Kotlin/Java.NetworkingSquare-125
RetrofitType-safe HTTP client for Android/Java.NetworkingSquare-92
Apollo GraphQLType-safe GraphQL client.GraphQL / APIApollo GraphQL-39
AAirshipMessaging--10
Firebase Cloud MessagingPush notifications via Firebase Cloud Messaging.MessagingGoogle-131
Google LocationFused location / geofencing services.MapsGoogle-106
Google MapsGoogle Maps SDK for mapping, places, and geocoding.MapsGoogle-87
ExoPlayerExtensible media player for Android.MediaGoogle-24
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-64
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-30
Kotlin CoroutinesAsynchronous/concurrent programming for Kotlin.Reactive / AsyncJetBrains-131
DataStoreTyped key-value / proto data storage (Jetpack).StorageGoogle-90
OkioI/O and buffering library for Kotlin/Java.StorageSquare-86
RoomSQLite object-mapping persistence (Jetpack).StorageGoogle-129
SSQLCipherStorage--14
SSQLDelightStorage--17
FirebaseGoogle's app platform (auth, Firestore, messaging, analytics, crash reporting).FirebaseGoogle-160
Google DataTransportFirebase/Google transport runtime for telemetry and event delivery.FirebaseGoogle-143
Google Play servicesGoogle's core mobile services platform.FirebaseGoogle-143
GlideImage loading and caching for Android.RenderingBumptech-112
Jetpack ComposeAndroid's declarative UI toolkit.RenderingGoogle-117
LottieRenders After Effects vector animations.RenderingAirbnb-138
Material ComponentsMaterial Design UI components for Android.RenderingGoogle-138
libPhoneNumberPhone number parsing, formatting, and validation library.TelephonyGoogle-30
Play IntegrityApp/device integrity and anti-abuse attestation API for Android.Anti-FraudGoogle-51
reCAPTCHABot/abuse detection and risk scoring.Anti-FraudGoogle-21
Firebase Remote ConfigFeature Flags--63
FFlipperDebugging--3
37 SDK rows

Interface

UI & graphics

Frameworks and libraries Sam's Club: Shopping & Savings uses to render its interface and animations.
GlideJetpack ComposeLottieMaterial Components

Models

On-device ML models

Core ML and ML model bundles shipped inside the app for local inference.
barcode_ssd_mobilenet_v1_dmp25_quant.tfliteoned_auto_regressor_mobile.tfliteoned_feature_extractor_mobile.tflite

Assets

Bundled fonts

Custom font families packaged in the app bundle.
Boglebogle_boldbogle_mono_boldbogle_mono_regularbogle_regularconverse_bogle_boldconverse_bogle_regularconverse_rubik_mediumconverse_rubik_regulareveryday_sans_mono_boldeveryday_sans_mono_regulareveryday_sans_ui_boldeveryday_sans_ui_regularglass_bluesteel_gibson_mediumglass_bluesteel_gibson_regularglass_bluesteel_gibson_semiboldglass_indigo_everyday_sans_black_fontglass_indigo_everyday_sans_medium_fontglass_maverick_samssans_lightglass_maverick_samssans_mediumglass_maverick_samssans_regularglass_maverick_samssans_semiboldIndigoSansroboto_lightroboto_mediumroboto_medium_numbersroboto_regularwcp_bogle_black_font

Packaging

Build & packaging

Dependency managers and build tooling detected in the app bundle.
Gradle (inferred)

Integrations

Services & integrations

Service configuration, URL schemes, universal links, and integration keys observed in the sanitized audit.

Firebase projects

sams-mobile-core-firebase-prodsams-mobile-core-firebase-prod.appspot.com · https://sams-mobile-core-firebase-prod.firebaseio.com

SDK config keys

com.google.android.gms.ads.APPLICATION_IDGoogle Mobile Ads (AdMob)
com.google.android.geo.API_KEYGoogle Maps

Registered URL schemes

@7F142EB7genericidphttpsrecaptcha

Queries other apps

com.android.vendingcom.android.webviewcom.facebook.katanacom.facebook.litecom.facebook.mlitecom.facebook.orcacom.freeosk.freeoskcom.google.android.apps.mapscom.google.android.apps.messagingcom.google.android.gmcom.google.android.talkcom.google.android.webviewcom.google.ar.corecom.instagram.androidcom.linkedin.androidcom.twitter.androidcom.whatsappcom.whatsapp.w4bintent:@7F14006Eintent:@7F1416EDintent:httpsorg.telegram.messenger

Universal link hosts

firebase.authsamsclub.bttn.io

ATS exception domains

usebutton.com

Network

Backend & API

Backend hosts, GraphQL operations, and certificate pinning signals detected in the app.

Backend hosts

app.samsclub.combonusoffers.samsclub.comcorporate.samsclub.comdapglass.samsclub.comidentity.samsclub.cominapp.samsclub.comphoto.samsclub.comq-api.www.samsclub.comsams-mobile-core-firebase-prod.firebaseio.comsamsclub.bttn.iosamsclub.comscene7.samsclub.comserviceshub.samsclub.comsng.samsclub.comtitan.samsclub.comwww.samsclub.com

Pinned certificates

pin:++MBgDH5WGvL9Bcn5Be30cRc[REDACTED]
pin:47DEQpj8HBSa+/TImW+5JCeu[REDACTED]
pin:f0KW/FtqTjs108NpYj42SrGv[REDACTED]

First party

App modules

Likely first-party modules and resource bundles detected in Sam's Club: Shopping & Savings.
com.rficom.rfi.sams

Entitlements

Capabilities

System capabilities and entitlement flags included with the app.
Advertising IDApproximate locationBiometric authCameraFingerprint authForeground serviceForeground service: locationMicrophoneNotificationsPhone / carrier infoPrecise locationStorage (read)Storage (write)

APIs

Detected API usage

System frameworks and privacy-sensitive APIs referenced by the binary.
Android KeystoreBiometric authClassLoader useDynamic code loading (DexClassLoader)Play Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionSymmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Privacy

Privacy signals

Privacy-related data types, tracking domains, and sensitive API signals detected statically.

Tracking domains

api2.branch.ioapp-measurement.comcdn.branch.iocombine.urbanairship.comdevice-api.urbanairship.comfirebase-settings.crashlytics.comgcd-s2s.appsflyer.comgoogleads.g.doubleclick.netonelink.appsflyer.compagead2.googlesyndication.comremote-data.urbanairship.comwallet-api.urbanairship.comwww.facebook.comwww.googleadservices.com

Accessed API samples

Ad SDK presentAdvertising IDAirshipAnalytics SDK presentBranchFirebase AnalyticsFirebase CrashlyticsFirebase MessagingGoogle App MeasurementGoogle Mobile Ads (AdMob)Tracking/telemetry hosts in app strings

Architecture

Architecture details

Additional build and bundle signals that help explain how the app is structured.

Storyboards

0

Nibs

0

Build dependency versions

androidx.activity_activity1.8.2 · Google
androidx.activity_activity-compose1.8.2 · Google
androidx.activity_activity-ktx1.8.2 · Google
androidx.annotation_annotation-experimental1.4.1 · Google
androidx.appcompat_appcompat1.7.0 · Google
androidx.appcompat_appcompat-resources1.7.0 · Google
androidx.asynclayoutinflater_asynclayoutinflater1.0.0
androidx.autofill_autofill1.1.0 · Google
androidx.biometric_biometric1.1.0 · Google
androidx.browser_browser1.4.0 · Google
androidx.camera_camera-camera21.4.2 · Google
androidx.camera_camera-core1.4.2 · Google
androidx.camera_camera-lifecycle1.4.2 · Google
androidx.camera_camera-video1.4.2
androidx.camera_camera-view1.4.2
androidx.cardview_cardview1.0.0 · Google
androidx.compose.animation_animation1.10.1 · Google
androidx.compose.animation_animation-core1.10.1 · Google
androidx.compose.foundation_foundation1.10.1 · Google
androidx.compose.foundation_foundation-layout1.10.1 · Google
androidx.compose.material3_material31.4.0 · Google
androidx.compose.material_material1.10.1
androidx.compose.material_material-icons-core1.7.8
androidx.compose.material_material-icons-extended1.7.8
androidx.compose.material_material-ripple1.10.1 · Google
androidx.compose.runtime_runtime1.10.1 · Google
androidx.compose.runtime_runtime-annotation1.10.1 · Google
androidx.compose.runtime_runtime-retain1.10.1 · Google
androidx.compose.runtime_runtime-saveable1.10.1 · Google
androidx.compose.ui_ui1.10.1 · Google
androidx.compose.ui_ui-geometry1.10.1 · Google
androidx.compose.ui_ui-graphics1.10.1 · Google
androidx.compose.ui_ui-test-manifest1.10.1 · Google
androidx.compose.ui_ui-text1.10.1 · Google
androidx.compose.ui_ui-tooling1.10.1 · Google
androidx.compose.ui_ui-tooling-data1.10.1 · Google
androidx.compose.ui_ui-tooling-preview1.10.1 · Google
androidx.compose.ui_ui-unit1.10.1 · Google
androidx.compose.ui_ui-util1.10.1 · Google
androidx.constraintlayout_constraintlayout-compose1.1.1
androidx.coordinatorlayout_coordinatorlayout1.1.0 · Google
androidx.core_core1.16.0 · Google
androidx.core_core-ktx1.13.0 · Google
androidx.core_core-viewtree1.0.0 · Google
androidx.credentials_credentials1.2.2 · Google
androidx.credentials_credentials-play-services-auth1.2.2 · Google
androidx.cursoradapter_cursoradapter1.0.0 · Google
androidx.customview_customview1.1.0 · Google
androidx.customview_customview-poolingcontainer1.0.0 · Google
androidx.databinding_viewbinding8.8.2 · Google
androidx.datastore_datastore1.1.7 · Google
androidx.datastore_datastore-core1.1.7 · Google
androidx.datastore_datastore-preferences1.1.7 · Google
androidx.datastore_datastore-preferences-core1.1.7 · Google
androidx.documentfile_documentfile1.0.0 · Google
androidx.drawerlayout_drawerlayout1.1.1 · Google
androidx.dynamicanimation_dynamicanimation1.0.0 · Google
androidx.emoji2_emoji21.4.0 · Google
androidx.emoji2_emoji2-views-helper1.4.0 · Google
androidx.exifinterface_exifinterface1.3.6 · Google
androidx.fragment_fragment1.8.9 · Google
androidx.fragment_fragment-compose1.8.9
androidx.fragment_fragment-ktx1.8.9 · Google
androidx.graphics_graphics-path1.0.1 · Google
androidx.gridlayout_gridlayout1.1.0
androidx.interpolator_interpolator1.0.0 · Google
androidx.legacy_legacy-support-core-utils1.0.0 · Google
androidx.lifecycle_lifecycle-livedata2.9.4 · Google
androidx.lifecycle_lifecycle-livedata-core2.9.4 · Google
androidx.lifecycle_lifecycle-livedata-core-ktx2.9.4 · Google
androidx.lifecycle_lifecycle-livedata-ktx2.9.4 · Google
androidx.lifecycle_lifecycle-process2.9.4 · Google
androidx.lifecycle_lifecycle-runtime2.9.4 · Google
androidx.lifecycle_lifecycle-runtime-compose2.9.4 · Google
androidx.lifecycle_lifecycle-runtime-ktx2.9.4 · Google
androidx.lifecycle_lifecycle-service2.9.4 · Google
androidx.lifecycle_lifecycle-viewmodel2.9.4 · Google
androidx.lifecycle_lifecycle-viewmodel-compose2.9.4 · Google
androidx.lifecycle_lifecycle-viewmodel-ktx2.9.4 · Google
androidx.lifecycle_lifecycle-viewmodel-savedstate2.9.4 · Google
androidx.loader_loader1.0.0 · Google
androidx.localbroadcastmanager_localbroadcastmanager1.0.0 · Google
androidx.media_media1.4.3 · Google
androidx.metrics_metrics-performance1.0.0
androidx.navigation_navigation-common2.9.6 · Google
androidx.navigation_navigation-compose2.9.6 · Google
androidx.navigation_navigation-dynamic-features-fragment2.9.6 · Google
androidx.navigation_navigation-dynamic-features-runtime2.9.6 · Google
androidx.navigation_navigation-fragment2.9.6
androidx.navigation_navigation-fragment-ktx2.9.6
androidx.navigation_navigation-runtime2.9.6 · Google
androidx.navigation_navigation-ui2.9.6
androidx.navigation_navigation-ui-ktx2.9.6
androidx.paging_paging-runtime3.2.1 · Google
androidx.paging_paging-runtime-ktx3.2.1 · Google
androidx.preference_preference1.2.0
androidx.print_print1.0.0 · Google
androidx.privacysandbox.ads_ads-adservices1.0.0-beta05 · Google
androidx.privacysandbox.ads_ads-adservices-java1.0.0-beta05 · Google
androidx.profileinstaller_profileinstaller1.3.0 · Google
androidx.recyclerview_recyclerview1.2.1 · Google
androidx.room_room-ktx2.6.1 · Google
androidx.room_room-runtime2.6.1 · Google
androidx.savedstate_savedstate1.3.2 · Google
androidx.savedstate_savedstate-compose1.3.2 · Google
androidx.savedstate_savedstate-ktx1.3.2 · Google
androidx.security_security-crypto1.1.0-alpha06
androidx.slidingpanelayout_slidingpanelayout1.2.0
androidx.sqlite_sqlite2.4.0 · Google
androidx.sqlite_sqlite-framework2.4.0 · Google
androidx.startup_startup-runtime1.1.1 · Google
androidx.swiperefreshlayout_swiperefreshlayout1.1.0 · Google
androidx.tracing_tracing1.2.0 · Google
androidx.tracing_tracing-ktx1.2.0 · Google
androidx.transition_transition1.6.0 · Google
androidx.vectordrawable_vectordrawable1.1.0 · Google
androidx.vectordrawable_vectordrawable-animated1.1.0 · Google
androidx.versionedparcelable_versionedparcelable1.1.1 · Google
androidx.viewpager2_viewpager21.0.0 · Google
androidx.viewpager_viewpager1.0.0 · Google
androidx.webkit_webkit1.10.0 · Google
androidx.window_window1.5.0 · Google
androidx.window_window-core1.5.0 · Google
androidx.work_work-runtime2.10.1 · Google
androidx.work_work-runtime-ktx2.10.1 · Google
com.google.android.material_material1.12.0 · material-components
com.google.gson?
com.google.protobuf?
com.squareup.moshi?
javax.inject? · JSR 330
kotlinx.serialization? · JetBrains
kotlinx_coroutines_android1.9.0
kotlinx_coroutines_core1.9.0
kotlinx_coroutines_play_services1.9.0
kotlinx_coroutines_slf4j1.9.0

Explore technologies across all apps

Browse every SDK, framework, and language we detect, then compare the apps that share the same stack.

App tech stacks →