Mercado Libre: Compras online Security & Privacy Scorecard

Mercado Libre: Compras online

com.mercadolibre | Version 10.504.0 | Analyzed February 4, 2026

What This Means for You

Browsing, search, and purchase activity is shared with Facebook, Google, and Adjust to build ad profiles and target users across other apps. Behavioral and biometric data from user interactions may be collected by FaceTec and Behaviosec. Data is also sent to Datadog and Bugsnag for monitoring purposes.

Recommendation: Use With Caution

Best For: Everyday shoppers comfortable with ad tracking
Avoid If: You keep financial or identity data strictly private

Key Findings

Data Security - 3 findings (2 high, 1 medium)

Network Security - 1 finding (1 medium)

Code Safety - 0 findings

Privacy - 2 findings (2 high)

Privacy Concerns

What Data is Collected

The app collects shopping behavior, search queries, purchase history, device identifiers, and location data. Biometric signals and behavioral patterns from user in-app interactions are also gathered for identity verification and fraud detection purposes. Survey responses may be collected through Qualtrics.

Third-Party Data Sharing

User activity data is shared with multiple external companies:

• Facebook SDK - receives behavioral data to build advertising profiles used to target users on other platforms
• Google Analytics and Firebase - receive usage and event data for analytics and advertising measurement
• Adjust - receives device and session data for cross-app advertising attribution
• FaceTec - receives biometric interaction data for identity verification
• Behaviosec - receives behavioral patterns to detect fraud
• Datadog - receives performance and session data for operational monitoring
• Bugsnag - receives crash reports and diagnostic data
• Qualtrics - receives survey and feedback responses

Understanding the Scores

Positive Security Features

• No notable positive security practices were identified in this version of the app.

Areas for Improvement

• User activity and biometric data is shared with multiple advertising and analytics companies, with limited transparency about how long that data is kept or how it is used beyond the session.
• The scope of data collection is broad relative to the app's core function, and there are few controls available to limit behavioral profiling or opt out of cross-app tracking.
• Data handling for payment and identity-related features does not fully meet the standards expected for apps that store sensitive financial information.

About This Analysis

This scorecard is based on static code analysis of the app and reflects observed practices at the time of the scan. Results describe practices present in the analyzed build and may not capture all behaviors that occur during live use.

App Details

• Package ID: com.mercadolibre
• Version: 10.504.0 (Build 1816182097)
• Scan Date: February 4, 2026