CITT

    Scan results

    de Volkskrant - Nieuws

    Android

    de Volkskrant - Nieuws is a Dutch news app by DPG Media offering latest news, background stories, and digital editions. Features include news notifications, classic newspaper view, offline reading, and access to sections covering News, Columns, Culture, Sports, and more. Free to download with option

    CITT SCORE
    69
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Dutch news readers comfortable with ad-supported content

    Not For: Users who don't want reading habits shared with ad networks

    What It Means For You

    Reading habits and article interactions are shared with advertising networks including Facebook, Google, and Criteo to serve targeted ads across other websites. Multiple analytics services track which content is read and how long users engage with it. User data reaches more than a dozen third-party companies.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (12)

    Data Security

    2 total
    1 Critical
    1 High

    Network Security

    1 total
    1 Low

    Code Security

    4 total
    1 High
    2 Medium
    1 Low

    Privacy

    4 total
    1 Critical
    3 Medium

    Third-Party Risk

    1 total
    1 Critical

    Third-Party Services

    Heap Analytics, Firebase Analytics, Google Tag Manager, Comscore, VWO Mobile, Gemius SDK, Google Ads, Criteo Publisher SDK, AppNexus (Xandr), Facebook Ads SDK, Temptation SDK, Pinch Optout Advertising, Firebase Crashlytics, Firebase Cloud Messaging, Firebase Remote Config, Firebase Firestore, Firebase Performance, Firebase In-App Messaging, PSPDFKit, DPG Amalia Video SDK, ExoPlayer, ACRA, Usabilla SDK, DPG Privacy Gate SDK

    Security Strengths

    • ✓HTTPS enforcement for all production endpoints
    • ✓Cleartext traffic blocked by default
    • ✓OAuth/OIDC with PKCE for secure authentication
    • ✓No SSL certificate validation bypasses detected
    • ✓Robust GDPR consent management system (PrivacyGate SDK)
    • ✓allowBackup disabled to prevent cloud backup extraction
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    news
    social
    sensitive data
    ads
    analytics
    session recording
    third party heavy

    Package

    be.persgroep.android.news.mobilevk

    Version

    7.36.0

    Analysis Date

    Mar 4, 2026

    Classes Analyzed

    36,864

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (1 critical, 1 high)

    Network Security - 1 finding (1 low)

    Code Safety - 0 findings

    Privacy - 4 findings (1 critical, 3 medium)

    Privacy Concerns

    What Data is Collected

    The app collects behavioral data including which articles are read, how long users spend on content, and in-app interactions. This information is used for targeted advertising and audience measurement purposes.

    Third-Party Data Sharing

    User data flows to more than a dozen third-party companies. Advertising partners include Facebook Ads SDK, Google Ads, Criteo Publisher SDK, AppNexus (Xandr), Temptation SDK, and Pinch Optout Advertising. Analytics and measurement services include Heap Analytics, Firebase Analytics, Google Tag Manager, Comscore, VWO Mobile, and Gemius SDK. Additional services include Firebase Crashlytics, Firebase Cloud Messaging, Firebase Remote Config, Firebase Firestore, Firebase Performance, Firebase In-App Messaging, PSPDFKit, DPG Amalia Video SDK, ExoPlayer, ACRA, Usabilla SDK, and DPG Privacy Gate SDK.

    Understanding the Scores

    • Security: 70/100
    • Privacy: 68/100
    • Data Security: 65/100
    • Network Security: 92/100
    • Code Safety: 82/100
    • Data Collection: 65/100
    • Data Sharing: 80/100
    • User Control: 85/100

    Positive Security Features

    • Network communications score highly, suggesting that data sent between the app and servers is generally protected in transit.
    • User control mechanisms are above average, offering users some ability to adjust their preferences.
    • Code integrity protections are in place, reducing the risk of the app behaving unexpectedly.

    Areas for Improvement

    • Reading activity is shared with multiple advertising networks in ways that may not be apparent when an article is opened.
    • Data security practices have room for improvement, with identified areas around how personal information is handled at rest.
    • The high number of advertising and analytics integrations means user data reaches many companies beyond the publisher's own systems, each with their own data retention policies.

    About This Analysis

    App Details

    • App Name: de Volkskrant - Nieuws
    • Package ID: be.persgroep.android.news.mobilevk
    • Version: 7.36.0
    • Scan Date: 2026-03-04
    • Platform: Android

    Right of Reply

    Developer not yet contacted