VTM GO Security & Privacy Scorecard

Android

48
Overall trust score
Unsafe
45
Security
50
Privacy

Viewing habits, device details, and in-app behavior are shared with multiple analytics and advertising services, including Google and Snowplow. Targeted ads are served by Google and FreeWheel based on user activity. Data flows to several third parties for measurement and ad delivery.

Best for

Belgian TV fans comfortable with ad tracking

Avoid if

You prefer to watch without behavioral ad targeting

Findings

  • 0 critical
  • 0 high
  • 0 medium
  • 0 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • Unencrypted Widevine DRM Keys in SQLite Database
  • Unencrypted OAuth Tokens in SharedPreferences
  • Hardcoded Push Notification API Keys

Top privacy issues

  • Cross-App User Profiling Without Specific Consent
  • Pre-Consent Analytics Initialization
  • Account ID Used as Firebase User ID

Full analysis

VTM GO

What This Means for You

Viewing habits, device details, and in-app behavior are shared with multiple analytics and advertising services, including Google and Snowplow. Targeted ads are served by Google and FreeWheel based on user activity. Data flows to several third parties for measurement and ad delivery.

Recommendation: Use With Caution

Best For: Belgian TV fans comfortable with ad tracking
Avoid If: You prefer to watch without behavioral ad targeting

Key Findings

Data Security - 2 findings (2 critical)

Network Security - 1 finding (1 medium)

Code Safety - 0 findings

Privacy - 7 findings (5 high, 1 medium, 1 low)

Privacy Concerns

What Data is Collected

VTM GO collects viewing history, device identifiers, and behavioral activity within the app. This data is used to personalize content recommendations and serve targeted advertising based on user interests and usage patterns.

Third-Party Data Sharing

User data is shared with the following third-party services:

  • Firebase Analytics - behavioral and usage tracking
  • Firebase Crashlytics - device diagnostics and stability data
  • Firebase Cloud Messaging - push notification delivery
  • Snowplow Analytics - detailed behavioral event tracking
  • Google Tag Manager - tracking and measurement coordination
  • Mux Data - video playback performance analytics
  • Gemius - audience reach measurement
  • Google Mobile Ads - targeted in-app advertising
  • FreeWheel - video ad delivery and measurement
  • Google AdServices - ad serving and campaign measurement
  • Google Cast Framework - casting and device connectivity
  • AppAuth - account authentication flows
  • Google UMP - ad consent management

Understanding the Scores

  • Security: 45/100
  • Privacy: 50/100
  • Data Security: 30/100
  • Network Security: 85/100
  • Code Safety: 55/100
  • Data Collection: 55/100
  • Data Sharing: 60/100
  • User Control: 65/100

Positive Security Features

No notable positive security practices were identified in this version of the app.

Areas for Improvement

  • Data stored on the device is not adequately protected, meaning it could be accessed if the phone is accessed by another person or app.
  • User activity is shared with over a dozen third-party advertising and analytics companies. Reducing this number would provide meaningfully more privacy.
  • In-app controls for limiting behavioral ad targeting and data collection are limited, leaving users with little practical choice over how their information is used.

About This Analysis

App Details

  • App Name: VTM GO
  • Package ID: be.vmma.vtm.zenderapp
  • Version: 24.260130 (Build 27379)
  • Scan Date: 2026-02-06
  • Platform: Android

Versions & scan history

ScanDateOverall score
#1 (current) 48/100