Albert Heijn supermarkt Security & Privacy Scorecard

Android

92
Overall trust score
Very Secure
85
Security
100
Privacy

In-app activity, including browsing and purchase history, is shared with advertising and attribution partners such as Google Ads and AppsFlyer. Crash reports and performance data are automatically collected to improve the app. Payment details and account information are handled with strong protections.

Best for

Regular AH shoppers comfortable with standard analytics

Findings

  • 1 critical
  • 0 high
  • 4 medium
  • 3 low
  • 9 info

1 issue identified across security and privacy analysis.

Top security issues

  • Scandit SDK Can Accept Expired Certificates
  • Conditional SSL Bypass Code in Production
  • Plaintext Database Storage (Third-Party SDKs)

Top privacy issues

  • Embrace SDK Auto-Initialization
  • Comprehensive Consent Management (Strength)
  • No Pre-Consent Tracking (Strength)

Full analysis

Albert Heijn supermarkt

Version: 9.30.1 | Analyzed: 2026-03-03 | Platform: Android

Overall Score: 85/100

What This Means for You

In-app activity, including browsing and purchase history, is shared with advertising and attribution partners such as Google Ads and AppsFlyer. Crash reports and performance data are automatically collected to improve the app. Payment details and account information are handled with strong protections.

Recommendation: Trustworthy

Best For: Regular AH shoppers comfortable with standard analytics

Key Findings

Data Security - 5 findings (2 medium, 3 info)

Network Security - 4 findings (1 critical, 2 medium, 1 info)

Code Safety - 0 findings

Privacy - 6 findings (1 low, 5 info)

Privacy Concerns

What Data is Collected

The app collects shopping history, browsing behavior within the app, and purchase activity. Performance and stability data, including crash reports, are gathered automatically in the background. Account details and payment information are required to use core features such as checkout and loyalty rewards.

Third-Party Data Sharing

User data is shared with the following third-party services:

  • Google Ads - Advertising and audience targeting
  • AppsFlyer - Attribution tracking to measure how users discovered the app
  • Firebase Crashlytics - Crash and stability reporting
  • Firebase Performance - App speed and reliability monitoring
  • Firebase Cloud Messaging - Push notifications
  • Firebase Remote Config - Feature configuration
  • Adyen 3DS2 - Payment processing
  • Batch - Push messaging and notifications
  • Embrace - Performance monitoring
  • Mopinion - In-app feedback collection
  • Scandit - Barcode and product scanning
  • Google reCAPTCHA - Fraud and bot protection

Understanding the Scores

Category Score
Security 85/100
Privacy 100/100
Data Security 92/100
Network Security 82/100
Code Safety 97/100
Data Collection 100/100
Data Sharing 100/100
User Control 100/100

Positive Security Features

  • Payment processing runs through Adyen, a dedicated payment infrastructure that keeps card details separate from the app's own data systems.
  • Sensitive data stored on the device is protected using Flutter Secure Storage, which applies the phone's built-in security controls to keep saved information isolated from other apps.

Areas for Improvement

  • One issue in the network layer affects how the app establishes secure connections to its servers. On untrusted networks such as public Wi-Fi, user data travels with less protection than expected.
  • Shopping and browsing data flows to multiple separate advertising and attribution services. Reducing the number of third-party data recipients would lower overall exposure.
  • Several medium-severity issues in data handling remain unresolved, which keeps the Data Security score below the level the app's otherwise strong Privacy performance would suggest.

About This Analysis

This scorecard is generated from automated static analysis of the app's code and configuration. Scores reflect the security and privacy practices found in the version analyzed and may change in future releases.

App Details

  • App Name: Albert Heijn supermarkt
  • Package ID: com.icemobile.albertheijn
  • Version: 9.30.1
  • Scan Date: 2026-03-03
  • Platform: Android

Versions & scan history

ScanDateOverall score
#4 (current) 92/100
#3 55/100
#1 62/100