Netflix Security & Privacy Scorecard

Android

58
Overall trust score
Use With Caution
52
Security
68
Privacy

App activity and device data is shared with crash-reporting and messaging services. Network protections have notable gaps, which may leave user account activity with less protection than expected under certain conditions. Viewing habits and usage patterns are collected to support the service.

Best for

Everyday streaming with standard crash reporting

Findings

  • 0 critical
  • 0 high
  • 0 medium
  • 0 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • JavaScript Authentication Bypass via WebView Bridge
  • Cleartext HTTP Traffic Allowed for Bootstrap Domains
  • All Local Databases Stored Without Encryption

Top privacy issues

  • Kids Profile PIN Token Stored in Plaintext
  • Viewing History Stored with Millisecond Precision Unencrypted
  • Comprehensive UI Tracking Without Opt-Out

Full analysis

Netflix

Version: 9.42.0 build 8 63616
Platform: Android
Scan Date: December 19, 2025

What This Means for You

App activity and device data is shared with crash-reporting and messaging services. Network protections have notable gaps, which may leave user account activity with less protection than expected under certain conditions. Viewing habits and usage patterns are collected to support the service.

Recommendation: Use With Caution

Best For: Everyday streaming with standard crash reporting

Key Findings

Data Security - 3 findings (1 critical, 2 high)

Network Security - 6 findings (3 critical, 1 high, 1 medium, 1 low)

Code Safety - 0 findings

Privacy - 9 findings (2 high, 5 medium, 2 low)

Privacy Concerns

What Data is Collected

Netflix collects viewing habits, device information, app activity, and usage patterns. This includes what content is watched, how long it is watched, and how users interact with the app across sessions.

Third-Party Data Sharing

User data is shared with the following third-party services:

  • Bugsnag - Crash reporting and error tracking
  • Firebase Cloud Messaging - Push notification delivery
  • Apollo GraphQL - Data querying and communication layer
  • OkHttp3 - Network request handling
  • AndroidX Jetpack - Core framework components
  • RxJava - Asynchronous operations
  • Dagger/Hilt - Internal dependency management
  • Widevine DRM - Content protection for streamed media

Understanding the Scores

Category Score
Security 52/100
Privacy 68/100
Data Security 55/100
Network Security 40/100
Code Safety 62/100
Data Collection 70/100
Data Sharing 85/100
User Control 65/100

Positive Security Features

  • Content protection for streamed media is handled through an established digital rights management system, helping safeguard streamed content.
  • Push notifications are delivered through a well-maintained third-party messaging service with a consistent update cadence.

Areas for Improvement

  • Network communication protections should be strengthened to better protect user account activity and content accessed while streaming.
  • The range of data shared with crash-reporting and analytics services could be narrowed to reduce how much user activity is visible to outside parties.
  • Options for controlling and limiting behavioral data collection could be made more accessible within the app settings.

About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect security and privacy practices observed at the time of the scan and may not capture all risks or changes introduced in subsequent updates.

App Details

Field Value
Package ID com.netflix.mediaclient
Version 9.42.0 build 8 63616
Platform Android
Scan Date December 19, 2025

Versions & scan history

ScanDateOverall score
#2 (current) 58/100
#1 75/100