Mysterium VPN: Fast & Secure Security & Privacy Scorecard
Android
The connection is protected with strong technical safeguards, but the app collects data about user activity and shares it with outside parties. Users have limited control over this data collection. For users who rely on a VPN to keep their activity private from their provider, the app's own data practices work against that goal.
Best for
Bypassing geo-restrictions on a budget
Avoid if
users wanting full privacy from their VPN provider
Findings
- 0 critical
- 0 high
- 2 medium
- 5 low
- 8 info
1 issue identified across security and privacy analysis.
Top security issues
- Firebase Analytics pre-consent initialization with ad ID permissions enables cross-app tracking from first launch, a core trust contradiction for a VPN app
- Unverified deep link scheme (mysteriumvpn://login) allows any installed app to invoke the login flow without user intent
- OneSignal NotificationOpenedActivityHMS activity exported without any permission requirement, accepting intents from any installed app
Top privacy issues
- Firebase Analytics auto-initializes with ad_user_data=true and ad_personalization_signals=true before any consent mechanism can execute, violating GDPR prior-consent requirements
- No native-layer Consent Management Platform found — Firebase ContentProvider initialization precedes any Dart-layer consent dialog, creating a non-compliant data collection window
- Extensive analytics stack (Firebase Analytics, Crashlytics, Performance, OneSignal, Sentry, Google App Measurement) creates broad multi-vendor telemetry footprint inconsistent with the app's privacy VPN positioning
Full analysis
Mysterium VPN: Fast & Secure
com.mysteriumvpn.android | Version 2.4.1 | Android | March 24, 2026
What This Means for You
The connection is protected with strong technical safeguards, but the app collects data about user activity and shares it with outside parties. Users have limited control over this data collection. For users who rely on a VPN to keep their activity private from their provider, the app's own data practices work against that goal.
Recommendation: Use With Caution
Best For: Bypassing geo-restrictions on a budget
Avoid If: users wanting full privacy from their VPN provider
Key Findings
Data Security - 4 findings (4 info)
Network Security - 2 findings (1 low, 1 info)
Code Safety - 0 findings
Privacy - 2 findings (2 medium)
Privacy Concerns
What Data is Collected
The app collects data about connection activity and usage patterns. Users have limited options to control or reduce this collection, which contributes to a low overall Privacy score of 35 out of 100.
Third-Party Data Sharing
No third-party advertising or analytics services were identified in the app. Data sharing with the developer's own systems is a concern, however. The Data Sharing score of 30 out of 100 reflects limited transparency around how user data is used beyond providing the core service.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 93/100 |
| Privacy | 35/100 |
| Data Security | 100/100 |
| Network Security | 97/100 |
| Code Safety | 92/100 |
| Data Collection | 55/100 |
| Data Sharing | 30/100 |
| User Control | 40/100 |
Positive Security Features
- Data handled within the app is secured to a high standard. This category scored a perfect 100 out of 100.
- Network communications are well-protected, with strong safeguards applied to data in transit, reflected in a 97 out of 100 Network Security score.
- The app's code structure raises no safety concerns across all areas reviewed, scoring 92 out of 100 for Code Safety.
Areas for Improvement
- The app collects data about user activity and gives users limited options to reduce or opt out of that collection. User Control scored 40 out of 100.
- Data sharing practices lack transparency. Data generated by users may be used or shared in ways that are not fully clear, as reflected in the Data Sharing score of 30 out of 100.
- Users who need strong privacy guarantees from their service provider should look for an app with a stricter no-logs policy and clearer, enforceable data controls.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the state of the app at the time of the analysis and may not capture server-side behavior or changes made after the scan date.
App Details
| Field | Value |
|---|---|
| App | Mysterium VPN: Fast & Secure |
| Package | com.mysteriumvpn.android |
| Version | 2.4.1 (build 199) |
| Scan Date | March 24, 2026 |
| Platform | Android |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #5 (current) | 52/100 | |
| #2 | 55/100 |