Davivienda Security & Privacy Scorecard

Davivienda

App: Davivienda
Package: com.davivienda.daviviendaapp
Version: 8.0.2 (8050)
Analyzed: February 8, 2026

Security Score: 35/100 | Privacy Score: 25/100

What This Means for You

Account activity, device behavior, and on-screen interactions are tracked by over a dozen third-party services, including marketing platforms and behavioral analytics. Biometric data is collected and processed by multiple third-party identity providers. Live sessions can be observed remotely through screen-sharing tools built into the app.

Recommendation: Use With Caution

Best For: Davivienda customers needing mobile banking access

Avoid If: You want your banking data off marketing platforms

Key Findings

Data Security - 4 findings (1 critical, 1 high, 2 medium)

Network Security - 1 finding (1 critical)

Code Safety - 0 findings

Privacy - 8 findings (4 critical, 3 high, 1 medium)

Privacy Concerns

What Data is Collected

Davivienda collects account activity, device identifiers, behavioral patterns, location data, and biometric information. On-screen interactions and navigation behavior are captured and processed continuously during user sessions.

Third-Party Data Sharing

User data is shared with the following third-party services:

• Braze - marketing automation and push messaging
• Firebase Analytics - behavioral analytics
• AppsFlyer - marketing attribution and analytics
• Google Tag Manager - tracking and tag management
• Dynatrace - performance monitoring
• Statsig - experimentation and feature management
• BioCatch - behavioral biometrics for fraud detection
• Cleafy - fraud detection and session monitoring
• Arxan - application integrity protection
• Incode - biometric identity verification
• TicNow - analytics and tracking
• FaceTec - facial biometric authentication
• Valid SDK - identity verification services
• Transmit Security - identity and access management
• Cobrowse.io - live session screen sharing
• Firebase Crashlytics - crash diagnostics and reporting

Understanding the Scores

Positive Security Features

• No positive security features were identified for this app.

Areas for Improvement

• Financial activity and behavioral data are shared with multiple marketing and advertising platforms. Limiting data flows to services directly necessary for banking operations would reduce user exposure to third-party profiling.
• Biometric data is collected and processed by several separate third-party identity providers. Consolidating these services and providing clear disclosure about retention and deletion would give users more meaningful control over their most sensitive personal information.
• A live screen-sharing capability built into the app allows a third party to observe a user's banking session in real time. This should require explicit opt-in consent each time it is activated.

About This Analysis

This scorecard is based on static analysis of the app's code and configuration.

App Details

• App Name: Davivienda
• Package ID: com.davivienda.daviviendaapp
• Version: 8.0.2 (8050)
• Scan Date: February 8, 2026
• Analysis Type: Static analysis of Android application