Easy Banking App Security & Privacy Scorecard
Android
In-app behavior is shared with marketing and customer experience analytics services, including Adobe Marketing Cloud and Medallia, which track how users navigate and interact with the app. Crash and performance data is collected by Firebase. Actual banking transactions stay with the bank, but usage patterns are monitored by third-party analytics providers.
Best for
BNP Paribas customers doing everyday banking
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Domain whitelist validation uses partial matching
- User authentication not required for encryption keys
- Third-party SDK WebViews expose JavaScript interfaces
Top privacy issues
- Medallia session recording may capture sensitive banking data
- Adobe Analytics collects extensive user profiling data
- Cleartext OCSP/CRL traffic for Bancontact PKI
Full analysis
Easy Banking App
com.bnpp.easybanking | Version 40.55.8 | Scanned 2026-02-01
What This Means for You
In-app behavior is shared with marketing and customer experience analytics services, including Adobe Marketing Cloud and Medallia, which track how users navigate and interact with the app. Crash and performance data is collected by Firebase. Actual banking transactions stay with the bank, but usage patterns are monitored by third-party analytics providers.
Recommendation: Trustworthy
Best For: BNP Paribas customers doing everyday banking
Key Findings
Data Security - 2 findings (1 medium, 1 low)
Network Security - 1 finding (1 medium)
Code Safety - 0 findings
Privacy - 3 findings (1 high, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
The app collects data about how users navigate and use it, including which screens are visited, which features are used, and how users move through the app. Crash reports and performance diagnostics are also collected when errors occur.
Third-Party Data Sharing
In-app behavior is shared with Adobe Marketing Cloud for marketing analytics and with Medallia for customer experience measurement. Crash and performance data is sent to Firebase (Google). Payment-related interactions involve Bancontact Payconiq for compatible transactions.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 82/100 |
| Privacy | 72/100 |
| Data Security | 85/100 |
| Network Security | 92/100 |
| Code Safety | 85/100 |
| Data Collection | 75/100 |
| Data Sharing | 78/100 |
| User Control | 88/100 |
Positive Security Features
- Enterprise-grade access management through IBM ISAM helps protect user accounts from unauthorised access.
- Gemalto/Thales Digital Security technology is used to strengthen sensitive operations within the app.
- Network communications are secured to a high standard, reflected in the 92/100 Network Security score.
Areas for Improvement
- How user usage data is shared with third-party marketing and analytics services could be made clearer, with better in-app controls for opting out.
- Some on-device data storage practices could be strengthened to better protect information saved locally on the device.
- More transparent disclosure about which third parties receive user behavioral data, and for what purpose, would give users greater control over their information.
About This Analysis
This scorecard is based on automated analysis of the app's code and configuration. Scores reflect the security and privacy practices observed in this version of the app.
App Details
| Field | Value |
|---|---|
| App Name | Easy Banking App |
| Package ID | com.bnpp.easybanking |
| Version | 40.55.8 |
| Scan Date | 2026-02-01 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 77/100 |