Airbnb Security & Privacy Scorecard
Android
Activity, location, and booking behavior is shared with Facebook, Google, and several marketing and attribution services. User data is handled with weaker-than-expected protections for a platform that stores payment details. User controls over what is collected and shared are limited.
Best for
Travelers comfortable with broad data sharing
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Cleartext HTTP Traffic Allowed for Authentication Services
- Unencrypted Databases Storing Sensitive User Data
- Multiple High-Value API Keys Exposed in String Resources
Top privacy issues
- Cross-App User Tracking via Advertising ID Without Consent
- Incognia SDK Performs Continuous Background Location Tracking
- Analytics Data Stored Unencrypted with PII Risk
Full analysis
Airbnb
What This Means for You
Activity, location, and booking behavior is shared with Facebook, Google, and several marketing and attribution services. User data is handled with weaker-than-expected protections for a platform that stores payment details. User controls over what is collected and shared are limited.
Recommendation: Use With Caution
Best For: Travelers comfortable with broad data sharing
Key Findings
Data Security - 3 findings (2 critical, 1 high)
Network Security - 1 finding (1 critical)
Code Safety - 0 findings
Privacy - 4 findings (1 critical, 2 high, 1 medium)
Privacy Concerns
What Data is Collected
Airbnb collects a broad range of personal information, including user location, device identifiers, search and browsing behavior within the app, booking history, payment details, and communication content. This data is used for personalization, behavioral profiling, and targeted advertising.
Third-Party Data Sharing
User data is shared with the following third-party services:
- Firebase Analytics (usage and behavioral analytics)
- Facebook SDK (advertising and audience profiling)
- Google Play Services (platform services and analytics)
- Singular SDK (marketing attribution)
- Incognia SDK (location and device intelligence)
- Branch.io (marketing attribution)
- Arkose Labs (fraud detection)
- Klarna (payment processing)
- Razorpay (payment processing)
- Braintree (payment processing)
Understanding the Scores
| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 40/100 |
| Data Security | 35/100 |
| Network Security | 50/100 |
| Code Safety | 55/100 |
| Data Collection | 45/100 |
| Data Sharing | 50/100 |
| User Control | 35/100 |
Positive Security Features
- None identified in this analysis.
Areas for Improvement
- Payment and personal data would benefit from stronger protections. The data security practices in place fall below what is expected for a platform handling financial transactions.
- The number of marketing and analytics services receiving user behavioral data makes it difficult to limit who has access to that information.
- The app provides limited options for users to manage, restrict, or opt out of data collection and sharing with advertising networks.
About This Analysis
App Details
| Field | Value |
|---|---|
| App Name | Airbnb |
| Package ID | com.airbnb.android |
| Version | 26.06 (Build 28018604) |
| Scan Date | 2026-02-06 |
| Analysis Method | Automated static analysis |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 42/100 |