Implement local processing for card scans

i work in it/security, so i know this stuff happens, but this still caught me off guard. my kid had two different pokemon card scanner apps installed. i was helping her scan some cards and got curious, so i checked the network traffic. both apps were uploading the actual scan photos to their servers. i’m not saying the apps are doing anything malicious. cloud processing is a normal technical choice. but i think people underestimate what “uploaded to a server” really means. i’ve seen people at companies casually open users’ personal photos and data just to test a feature, debug something, or check if a pipeline is working. sometimes that data is sitting in an internal tool, bucket, dashboard, or admin panel with emails and other identifiers attached, so someone could easily look you up elsewhere if they wanted to. and even if nobody inside the company does anything bad, companies get hacked and data leaks happen all the time. this isn’t some rare edge case or one-company problem. it’s way more normal in the industry than most users realize. Encryption for most of the companies is just a marketing terms )))) and with a card scanner, the photo might not be just the card. it can include literally anything, when you take a photo it sends it to the server. if a kid is using the app, that feels worth knowing. I feel very uncomfortable about it. i deleted both apps for now. maybe this is obvious to some people, but it wasn’t obvious to me in this context. so, please know what