Navy Federal Credit Union Security & Privacy Scorecard

Navy Federal Credit Union

com.navyfederal.android | Version 2026.3.1 | Scanned 2026-03-26

What This Means for You

In-app behavior is shared with marketing platforms, meaning banking activity can inform targeted offers sent to users. A fraud-detection service also profiles device and usage patterns. More than a dozen third-party services receive data about how users interact with the app.

Recommendation: Use With Caution

Best For: Navy Federal members handling everyday banking
Avoid If: Users who prefer banking data stays private from marketers

Key Findings

Data Security - 1 finding (1 medium)

Network Security - 4 findings (4 medium)

Code Safety - 0 findings

Privacy - 3 findings (1 high, 1 medium, 1 low)

Privacy Concerns

What Data is Collected

The app collects device identifiers, usage patterns, and behavioral data generated during banking sessions. This includes how users navigate the app, which features are accessed, and technical details about the device.

Third-Party Data Sharing

More than a dozen third-party services receive data from the app, spanning advertising, analytics, fraud detection, and payment processing:

• Salesforce Marketing Cloud - receives behavioral data to enable targeted marketing communications
• Firebase Analytics - tracks in-app usage and engagement patterns
• ThreatMetrix - profiles device and usage behavior for fraud screening
• Qualtrics - collects feedback and survey responses
• Yodlee - accesses financial account data for account aggregation features
• Google Maps, Google Sign-In, Google ML Kit, Google Pay - multiple Google services, each with associated data flows
• Norton Mobile Security - scans the device for security purposes
• Zelle - processes payment data for money transfers
• ForgeRock - handles identity and access management
• Firebase Crashlytics, Firebase Cloud Messaging - receives error reports and delivers push notifications
• Microsoft App Center - receives crash and diagnostic data

Understanding the Scores

Positive Security Features

• On-device data handling is strong, with sensitive banking data well-protected in local storage
• Data sharing scope is relatively restrained given the breadth of third-party services integrated into the app

Areas for Improvement

• Code-level protections are weaker than expected for a financial app, making the app's internals more accessible to outside analysis
• Several network connections use configurations that fall short of the strongest available protections
• Behavioral and usage data flows to marketing platforms with limited options for users to restrict this sharing

About This Analysis

Static analysis of the app's compiled code and configuration, conducted without running the app or accessing live user data. Results reflect the app version listed below and may change with future updates.

App Details