Mysterium VPN: Fast & Secure Security & Privacy Scorecard

Android

52
Overall trust score
Use With Caution
93
Security
35
Privacy

The connection is protected with strong technical safeguards, but the app collects data about user activity and shares it with outside parties. Users have limited control over this data collection. For users who rely on a VPN to keep their activity private from their provider, the app's own data practices work against that goal.

Best for

Bypassing geo-restrictions on a budget

Avoid if

users wanting full privacy from their VPN provider

Findings

  • 0 critical
  • 0 high
  • 2 medium
  • 5 low
  • 8 info

1 issue identified across security and privacy analysis.

Top security issues

  • Firebase Analytics pre-consent initialization with ad ID permissions enables cross-app tracking from first launch, a core trust contradiction for a VPN app
  • Unverified deep link scheme (mysteriumvpn://login) allows any installed app to invoke the login flow without user intent
  • OneSignal NotificationOpenedActivityHMS activity exported without any permission requirement, accepting intents from any installed app

Top privacy issues

  • Firebase Analytics auto-initializes with ad_user_data=true and ad_personalization_signals=true before any consent mechanism can execute, violating GDPR prior-consent requirements
  • No native-layer Consent Management Platform found — Firebase ContentProvider initialization precedes any Dart-layer consent dialog, creating a non-compliant data collection window
  • Extensive analytics stack (Firebase Analytics, Crashlytics, Performance, OneSignal, Sentry, Google App Measurement) creates broad multi-vendor telemetry footprint inconsistent with the app's privacy VPN positioning

Full analysis

Mysterium VPN: Fast & Secure

com.mysteriumvpn.android | Version 2.4.1 | Android | March 24, 2026

What This Means for You

The connection is protected with strong technical safeguards, but the app collects data about user activity and shares it with outside parties. Users have limited control over this data collection. For users who rely on a VPN to keep their activity private from their provider, the app's own data practices work against that goal.

Recommendation: Use With Caution

Best For: Bypassing geo-restrictions on a budget
Avoid If: users wanting full privacy from their VPN provider

Key Findings

Data Security - 4 findings (4 info)

Network Security - 2 findings (1 low, 1 info)

Code Safety - 0 findings

Privacy - 2 findings (2 medium)

Privacy Concerns

What Data is Collected

The app collects data about connection activity and usage patterns. Users have limited options to control or reduce this collection, which contributes to a low overall Privacy score of 35 out of 100.

Third-Party Data Sharing

No third-party advertising or analytics services were identified in the app. Data sharing with the developer's own systems is a concern, however. The Data Sharing score of 30 out of 100 reflects limited transparency around how user data is used beyond providing the core service.

Understanding the Scores

Category Score
Security 93/100
Privacy 35/100
Data Security 100/100
Network Security 97/100
Code Safety 92/100
Data Collection 55/100
Data Sharing 30/100
User Control 40/100

Positive Security Features

  • Data handled within the app is secured to a high standard. This category scored a perfect 100 out of 100.
  • Network communications are well-protected, with strong safeguards applied to data in transit, reflected in a 97 out of 100 Network Security score.
  • The app's code structure raises no safety concerns across all areas reviewed, scoring 92 out of 100 for Code Safety.

Areas for Improvement

  • The app collects data about user activity and gives users limited options to reduce or opt out of that collection. User Control scored 40 out of 100.
  • Data sharing practices lack transparency. Data generated by users may be used or shared in ways that are not fully clear, as reflected in the Data Sharing score of 30 out of 100.
  • Users who need strong privacy guarantees from their service provider should look for an app with a stricter no-logs policy and clearer, enforceable data controls.

About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the state of the app at the time of the analysis and may not capture server-side behavior or changes made after the scan date.

App Details

Field Value
App Mysterium VPN: Fast & Secure
Package com.mysteriumvpn.android
Version 2.4.1 (build 199)
Scan Date March 24, 2026
Platform Android

Versions & scan history

ScanDateOverall score
#5 (current) 52/100
#2 55/100