Read-only public market analytics vs exchange API-key apps: crypto research security compared
Every third-party crypto app that asks for your exchange API keys or Web3 wallet addresses expands your personal attack surface—risking credential leaks, misconfigured trade/withdrawal scopes, or net-worth profiling. Market Brief AI proves that deep quantitative research requires zero credentials: it reads public Binance USDT market data, public macro feeds, and public GDELT headlines, running all Hidden Markov Models locally on your iPhone and iPad strictly for educational simulation, not financial advice.
1. Threat model comparison: public endpoints vs cloud-stored API keys
Over the past several years, cloud breaches at third-party bot platforms and portfolio trackers have repeatedly forced millions of crypto users to emergency-revoke exchange API keys. Even “read-only” API keys leak exact account balances, historical fills, deposit addresses, and trading habits if a vendor database is compromised—while accidentally enabling “Spot/Margin Trade” permissions allows wash-trading drains on illiquid pairs.
Market Brief AI eliminates credential storage by architectural rule: there is no user login, no API-key input screen, no wallet connect modal, and no Arte Soft cloud database holding customer profiles.
| Risk vector | Market Brief AI (Public Data Only) | Exchange API-Key Bots & Trackers |
|---|---|---|
| Unauthorized live order execution | Impossible—zero exchange credentials or order code exist | High risk if trade scope is enabled and vendor cloud is breached |
| Personal balance & net-worth exposure | Zero—app never knows whether you own $0 or $10M of crypto | Read-only keys expose every balance, fill & deposit timestamp |
| Email / identity correlation | Zero—no user account or email address collected | Ties email, IP, device ID & exchange balances together |
| iOS device permissions | Zero permissions requested (no camera, mic, location, contacts, push) | Commonly requests camera (QR key scan) & push notifications |
| Third-party analytics / crash SDKs | None included in binary | Frequently ships telemetry, attribution & ad SDKs |
2. What you can still accomplish without ever linking an account
You only need an exchange API key when software must read your private balance or submit live orders on your behalf. For market-regime modeling, backtesting, macro correlation study, and news sentiment analysis, public market series contain 100% of the mathematical signal.
In Market Brief AI on iOS 26 and iPadOS 26, syncing public Binance USDT candles (daily back to 2017, recent 1h & 5m) lets you fit Hera, Metis, Hestia, and Athena locally, overlay BLS CPI, Fed tone, S&P 500, and Core ML FinBERT sentiment, and replay closed-bar strategies from $100 to $1B virtual test capital against buy-and-hold.
| Task | Requires exchange API keys? | Supported in Market Brief AI? |
|---|---|---|
| Fitting 3-state, input, duration & factorial HMMs to USDT spot pairs | No—uses public candle history | Yes (Hera Free; Metis/Hestia Plus; Athena Pro) |
| Scoring GDELT news headlines with FinBERT NLP | No—uses public GDELT + local Core ML | Yes (Free, Plus & Pro) |
| Simulating closed-bar BUY/SELL/WAIT rules vs passive buy-and-hold | No—uses virtual test capital ($100–$1B) | Yes, with full rule log in Pro |
| Auto-syncing personal multi-exchange tax lots | Yes (read-only API or CSV) | No—intentionally out of scope |
| Placing automated live grid/DCA orders on your exchange balance | Yes (trade-enabled API) | Never—educational simulation only |
3. Operational hygiene for security-conscious crypto researchers
Security-first investors compartmentalise ruthlessly: hardware wallets stay offline, exchange accounts stay locked behind hardware passkeys with zero third-party API keys enabled, and analytical software runs read-only on public market data.
Market Brief AI fits seamlessly into that compartmentalised setup at $0 Free, $7.99/mo Plus, or $12.99/mo Pro billed solely through Apple.
| Layer | Recommended security practice | Why it works |
|---|---|---|
| Quantitative regime research | Market Brief AI on iPhone/iPad (zero login, zero API keys) | Nothing sensitive exists in the app to be phished or leaked |
| Subscription billing | Apple In-App Purchase | Merchant never sees card details or email |
| Offline review | Delete an asset or the app anytime to wipe local SQLite/storage | 100% user-controlled data lifecycle |
| Decision boundary | Treat all outputs strictly as educational simulations | Market Brief AI never gives financial advice or prompts impulsive trades |
Why doesn’t Market Brief AI offer even “read-only” Binance API key import?
Because public Binance USDT price history requires zero authentication, and refusing API keys altogether guarantees Market Brief AI never touches your personal balances or credentials.
Do public data services see my personal identity when Market Brief AI syncs?
As explained in the Privacy Policy, public services (Binance, GDELT, BLS, FRED/Fed, USGS, NOAA) receive only the standard web request for public data (which asset/dates) and your IP address—nothing personal from the app.
How are Plus and Pro restored on a new iPad without an account?
Through Apple’s built-in StoreKit purchase restoration tied to your App Store account—Arte Soft EOOD stores no user database.
Is Market Brief AI safe for students learning quantitative finance?
Yes. It requests zero permissions, requires zero real money or brokerage accounts, shows a clear non-financial-advice disclaimer first, and simulates virtual test capital only.
