CITT

    Scan results

    Eneco

    Android

    Manage your energy bills and usage with the Eneco app. Adjust your account details, submit meter readings, view payment history, and track energy consumption with detailed usage analytics. Wear OS support available.

    CITT SCORE
    60
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Managing your home energy contract

    Not For: You want minimal in-app behavior tracking

    What It Means For You

    Several analytics tools, including ContentSquare and Heap Analytics, record how users tap and navigate through the app to build a picture of in-app behavior. Account and billing details may not be fully protected, which could affect sensitive data. Users retain reasonable control over personal data settings.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (13)

    Data Security

    2 total
    1 Critical
    1 High

    Network Security

    3 total
    1 High
    2 Medium

    Code Security

    4 total
    1 Critical
    2 High
    1 Medium

    Privacy

    3 total
    1 Critical
    2 Medium

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Urban Airship, ContentSquare, Dynatrace, Firebase, Okta, Usabilla, Heap Analytics, Enode LinkKit, Google Play Services, GrowthBook

    Security Strengths

    • ✓HTTPS enforcement for all production endpoints
    • ✓Android KeyStore integration via Okta SDK
    • ✓WebView file access properly disabled
    • ✓SSL error handling without certificate bypass
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    analytics
    session recording
    ads

    Package

    com.afrogleap.eneco.myeneco

    Version

    2026.0224.0 (Build 100007975)

    Analysis Date

    Mar 6, 2026

    Classes Analyzed

    35,011

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (1 critical, 1 high)

    Network Security - 4 findings (1 high, 2 medium, 1 low)

    Code Safety - 0 findings

    Privacy - 3 findings (1 critical, 2 medium)

    Privacy Concerns

    What Data is Collected

    Eneco collects account and billing details, energy usage data, device identifiers, and records of how users interact with the app. Behavioral analytics services capture the specific screens users visit and actions taken within the app to build a profile of in-app activity.

    Third-Party Data Sharing

    Usage and behavioral data are shared with the following third-party services:

    • Urban Airship - push notification delivery
    • ContentSquare - detailed in-app behavior recording
    • Dynatrace - app performance monitoring
    • Firebase - analytics and crash reporting
    • Okta - identity and sign-in services
    • Usabilla - in-app feedback collection
    • Heap Analytics - behavioral analytics and interaction tracking
    • Enode LinkKit - smart energy device integration
    • Google Play Services - core platform services
    • GrowthBook - feature experimentation

    Understanding the Scores

    CategoryScore
    Security52/100
    Privacy68/100
    Data Security48/100
    Network Security86/100
    Code Safety70/100
    Data Collection62/100
    Data Sharing96/100
    User Control72/100

    Positive Security Features

    • None identified in this version of the app.

    Areas for Improvement

    • Account and billing data could be stored with stronger protections on the device. If a phone were accessed without authorization, this information would be more exposed than expected.
    • Multiple analytics providers collect detailed records of in-app behavior with limited visibility into how to opt out. Clearer controls would give users more say over behavioral profiling.
    • Some data in transit between the device and Eneco's servers uses protection settings that could be strengthened to reduce the chance of interception on untrusted networks such as public Wi-Fi.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect security and privacy practices observed at the time of scanning and may not capture all behaviors that occur at runtime.

    App Details

    FieldValue
    App NameEneco
    Package IDcom.afrogleap.eneco.myeneco
    Version2026.0224.0 (Build 100007975)
    Scan Date2026-03-06

    Right of Reply

    Developer not yet contacted