CITT

    Scan results

    VTM GO

    Android

    VTM GO is a streaming app from DPG Media offering entertainment content including blockbusters, series, soaps, and live TV from VTM. Features include week-ahead access for premium subscribers, download capability, and a dedicated kids section. Rated 3.2 stars with 1M+ downloads.

    CITT SCORE
    48
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Belgian TV fans comfortable with ad tracking

    Not For: You prefer to watch without behavioral ad targeting

    What It Means For You

    Viewing habits, device details, and in-app behavior are shared with multiple analytics and advertising services, including Google and Snowplow. Targeted ads are served by Google and FreeWheel based on user activity. Data flows to several third parties for measurement and ad delivery.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (19)

    Data Security

    2 total
    2 Critical

    Network Security

    1 total
    1 Medium

    Code Security

    8 total
    1 Critical
    4 High
    3 Medium

    Privacy

    7 total
    5 High
    1 Medium
    1 Low

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Firebase Analytics, Firebase Crashlytics, Firebase Cloud Messaging, Snowplow Analytics, Google Tag Manager, Mux Data, Gemius, Google Mobile Ads, FreeWheel, Google AdServices, Google Cast Framework, AppAuth, Google UMP

    Security Strengths

    • ✓Certificate pinning implemented (Let's Encrypt ISRG Root X1/X2)
    • ✓DNS-over-HTTPS using Google DNS
    • ✓HTTPS-only communication for all network traffic
    • ✓OIDC/OAuth 2.0 authentication with PKCE support
    • ✓Room ORM with parameterized queries prevents SQL injection
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    ads
    location
    sensitive data

    Package

    be.vmma.vtm.zenderapp

    Version

    24.260130 (Build 27379)

    Analysis Date

    Feb 6, 2026

    Classes Analyzed

    18,621

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (2 critical)

    Network Security - 1 finding (1 medium)

    Code Safety - 0 findings

    Privacy - 7 findings (5 high, 1 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    VTM GO collects viewing history, device identifiers, and behavioral activity within the app. This data is used to personalize content recommendations and serve targeted advertising based on user interests and usage patterns.

    Third-Party Data Sharing

    User data is shared with the following third-party services:

    • Firebase Analytics - behavioral and usage tracking
    • Firebase Crashlytics - device diagnostics and stability data
    • Firebase Cloud Messaging - push notification delivery
    • Snowplow Analytics - detailed behavioral event tracking
    • Google Tag Manager - tracking and measurement coordination
    • Mux Data - video playback performance analytics
    • Gemius - audience reach measurement
    • Google Mobile Ads - targeted in-app advertising
    • FreeWheel - video ad delivery and measurement
    • Google AdServices - ad serving and campaign measurement
    • Google Cast Framework - casting and device connectivity
    • AppAuth - account authentication flows
    • Google UMP - ad consent management

    Understanding the Scores

    • Security: 45/100
    • Privacy: 50/100
    • Data Security: 30/100
    • Network Security: 85/100
    • Code Safety: 55/100
    • Data Collection: 55/100
    • Data Sharing: 60/100
    • User Control: 65/100

    Positive Security Features

    No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • Data stored on the device is not adequately protected, meaning it could be accessed if the phone is accessed by another person or app.
    • User activity is shared with over a dozen third-party advertising and analytics companies. Reducing this number would provide meaningfully more privacy.
    • In-app controls for limiting behavioral ad targeting and data collection are limited, leaving users with little practical choice over how their information is used.

    About This Analysis

    App Details

    • App Name: VTM GO
    • Package ID: be.vmma.vtm.zenderapp
    • Version: 24.260130 (Build 27379)
    • Scan Date: 2026-02-06
    • Platform: Android

    Right of Reply

    Developer not yet contacted