Question: I am building an app in react native that uses Auth0 for user authentication. I also use Auth0 to pull down an array of data from the user's metadata(JSON).

The app works perfectly in iOS, but in Android the array in the user's metadata is empty. Everything besides the array loads properly. 

After testing, I have realized that the problem only occurs if the array is an array of objects. If I change it to an array of test strings, the array loads in Android.

Does anyone know why an array of objects in JSON data would load in iOS but not in Android?

Answer: 
In short, yes. The program that starts the process owns the address space and can do whatever it likes. If your library has dangerous interactions with another process with more privileges that can lead to escalation, the other process needs its own defenses. Nothing prevents somebody from calling private methods or static functions in your library at all, and any method that might do could be circumvented.
> 
> Couldn't one just specify the address to jump to by "guessing" in
>  order to call private methods
> 
> 
> 

Yes. But, if you don't trust the program, there are much worse things it could do. Simple solution: Do not execute programs you are not trusting.

> 
> and possibly gain escalated privileges?
> 
> 
> 

No. A library used by a process doesn't have more privileges than the process itself.