de Volkskrant - Nieuws Security & Privacy Scorecard
Android
Reading habits and article interactions are shared with advertising networks including Facebook, Google, and Criteo to serve targeted ads across other websites. Multiple analytics services track which content is read and how long users engage with it. User data reaches more than a dozen third-party companies.
Best for
Dutch news readers comfortable with ad-supported content
Avoid if
Users who don't want reading habits shared with ad networks
Findings
- 3 critical
- 2 high
- 5 medium
- 2 low
- 6 info
1 issue identified across security and privacy analysis.
Top security issues
- Unencrypted OAuth Token Storage
- Facebook SDK Token Storage Without Encryption
- Exported Debug Activity in Production Build
Top privacy issues
- Heap Analytics Pre-Consent Initialization
- Unencrypted SQLite Databases
- Heap Analytics Session Recording Storage
Full analysis
de Volkskrant - Nieuws
Overall Security: 70/100 | Privacy: 68/100
What This Means for You
Reading habits and article interactions are shared with advertising networks including Facebook, Google, and Criteo to serve targeted ads across other websites. Multiple analytics services track which content is read and how long users engage with it. User data reaches more than a dozen third-party companies.
Recommendation: Use With Caution
Best For: Dutch news readers comfortable with ad-supported content
Avoid If: Users who don't want reading habits shared with ad networks
Key Findings
Data Security - 2 findings (1 critical, 1 high)
Network Security - 1 finding (1 low)
Code Safety - 0 findings
Privacy - 4 findings (1 critical, 3 medium)
Privacy Concerns
What Data is Collected
The app collects behavioral data including which articles are read, how long users spend on content, and in-app interactions. This information is used for targeted advertising and audience measurement purposes.
Third-Party Data Sharing
User data flows to more than a dozen third-party companies. Advertising partners include Facebook Ads SDK, Google Ads, Criteo Publisher SDK, AppNexus (Xandr), Temptation SDK, and Pinch Optout Advertising. Analytics and measurement services include Heap Analytics, Firebase Analytics, Google Tag Manager, Comscore, VWO Mobile, and Gemius SDK. Additional services include Firebase Crashlytics, Firebase Cloud Messaging, Firebase Remote Config, Firebase Firestore, Firebase Performance, Firebase In-App Messaging, PSPDFKit, DPG Amalia Video SDK, ExoPlayer, ACRA, Usabilla SDK, and DPG Privacy Gate SDK.
Understanding the Scores
- Security: 70/100
- Privacy: 68/100
- Data Security: 65/100
- Network Security: 92/100
- Code Safety: 82/100
- Data Collection: 65/100
- Data Sharing: 80/100
- User Control: 85/100
Positive Security Features
- Network communications score highly, suggesting that data sent between the app and servers is generally protected in transit.
- User control mechanisms are above average, offering users some ability to adjust their preferences.
- Code integrity protections are in place, reducing the risk of the app behaving unexpectedly.
Areas for Improvement
- Reading activity is shared with multiple advertising networks in ways that may not be apparent when an article is opened.
- Data security practices have room for improvement, with identified areas around how personal information is handled at rest.
- The high number of advertising and analytics integrations means user data reaches many companies beyond the publisher's own systems, each with their own data retention policies.
About This Analysis
App Details
- App Name: de Volkskrant - Nieuws
- Package ID: be.persgroep.android.news.mobilevk
- Version: 7.36.0
- Scan Date: 2026-03-04
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #3 (current) | 69/100 | |
| #2 | 78/100 |