Albert Heijn supermarkt Security & Privacy Scorecard
Android
In-app activity, including browsing and purchase history, is shared with advertising and attribution partners such as Google Ads and AppsFlyer. Crash reports and performance data are automatically collected to improve the app. Payment details and account information are handled with strong protections.
Best for
Regular AH shoppers comfortable with standard analytics
Findings
- 1 critical
- 0 high
- 4 medium
- 3 low
- 9 info
1 issue identified across security and privacy analysis.
Top security issues
- Scandit SDK Can Accept Expired Certificates
- Conditional SSL Bypass Code in Production
- Plaintext Database Storage (Third-Party SDKs)
Top privacy issues
- Embrace SDK Auto-Initialization
- Comprehensive Consent Management (Strength)
- No Pre-Consent Tracking (Strength)
Full analysis
Albert Heijn supermarkt
Version: 9.30.1 | Analyzed: 2026-03-03 | Platform: Android
Overall Score: 85/100
What This Means for You
In-app activity, including browsing and purchase history, is shared with advertising and attribution partners such as Google Ads and AppsFlyer. Crash reports and performance data are automatically collected to improve the app. Payment details and account information are handled with strong protections.
Recommendation: Trustworthy
Best For: Regular AH shoppers comfortable with standard analytics
Key Findings
Data Security - 5 findings (2 medium, 3 info)
Network Security - 4 findings (1 critical, 2 medium, 1 info)
Code Safety - 0 findings
Privacy - 6 findings (1 low, 5 info)
Privacy Concerns
What Data is Collected
The app collects shopping history, browsing behavior within the app, and purchase activity. Performance and stability data, including crash reports, are gathered automatically in the background. Account details and payment information are required to use core features such as checkout and loyalty rewards.
Third-Party Data Sharing
User data is shared with the following third-party services:
- Google Ads - Advertising and audience targeting
- AppsFlyer - Attribution tracking to measure how users discovered the app
- Firebase Crashlytics - Crash and stability reporting
- Firebase Performance - App speed and reliability monitoring
- Firebase Cloud Messaging - Push notifications
- Firebase Remote Config - Feature configuration
- Adyen 3DS2 - Payment processing
- Batch - Push messaging and notifications
- Embrace - Performance monitoring
- Mopinion - In-app feedback collection
- Scandit - Barcode and product scanning
- Google reCAPTCHA - Fraud and bot protection
Understanding the Scores
| Category | Score |
|---|---|
| Security | 85/100 |
| Privacy | 100/100 |
| Data Security | 92/100 |
| Network Security | 82/100 |
| Code Safety | 97/100 |
| Data Collection | 100/100 |
| Data Sharing | 100/100 |
| User Control | 100/100 |
Positive Security Features
- Payment processing runs through Adyen, a dedicated payment infrastructure that keeps card details separate from the app's own data systems.
- Sensitive data stored on the device is protected using Flutter Secure Storage, which applies the phone's built-in security controls to keep saved information isolated from other apps.
Areas for Improvement
- One issue in the network layer affects how the app establishes secure connections to its servers. On untrusted networks such as public Wi-Fi, user data travels with less protection than expected.
- Shopping and browsing data flows to multiple separate advertising and attribution services. Reducing the number of third-party data recipients would lower overall exposure.
- Several medium-severity issues in data handling remain unresolved, which keeps the Data Security score below the level the app's otherwise strong Privacy performance would suggest.
About This Analysis
This scorecard is generated from automated static analysis of the app's code and configuration. Scores reflect the security and privacy practices found in the version analyzed and may change in future releases.
App Details
- App Name: Albert Heijn supermarkt
- Package ID: com.icemobile.albertheijn
- Version: 9.30.1
- Scan Date: 2026-03-03
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #4 (current) | 92/100 | |
| #3 | 55/100 | |
| #1 | 62/100 |