Scan results

    Netflix

    Android

    Stream award-winning TV shows, movies, documentaries and stand-up specials. Browse thousands of titles, get personalized recommendations, enjoy family-friendly content, and watch offline. Requires authentication and subscription.

    CITT SCORE
    58
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Everyday streaming with standard crash reporting

    What It Means For You

    App activity and device data is shared with crash-reporting and messaging services. Network protections have notable gaps, which may leave user account activity with less protection than expected under certain conditions. Viewing habits and usage patterns are collected to support the service.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (27)

    Data Security

    3 total
    1 Critical
    2 High

    Network Security

    6 total
    3 Critical
    1 High
    1 Medium
    1 Low

    Code Security

    9 total
    1 Critical
    1 High
    6 Medium
    1 Info

    Privacy

    9 total
    2 High
    5 Medium
    2 Low

    Third-Party Services

    Bugsnag, Firebase Cloud Messaging, Apollo GraphQL, OkHttp3, AndroidX Jetpack, RxJava, Dagger/Hilt, Widevine DRM

    Security Strengths

    • MSL (Message Security Layer) proprietary encryption for API traffic
    • Strong OkHttp SHA-256 certificate pinning implementation
    • Firebase Analytics explicitly disabled
    • Google Ad ID collection disabled
    • First-party analytics only (no third-party data sharing)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    sensitive data
    financial
    ads
    location

    Package

    com.netflix.mediaclient

    Version

    9.42.0 build 8 63616

    Analysis Date

    Dec 19, 2025

    Classes Analyzed

    26,633

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (1 critical, 2 high)

    Network Security - 6 findings (3 critical, 1 high, 1 medium, 1 low)

    Code Safety - 0 findings

    Privacy - 9 findings (2 high, 5 medium, 2 low)

    Privacy Concerns

    What Data is Collected

    Netflix collects viewing habits, device information, app activity, and usage patterns. This includes what content is watched, how long it is watched, and how users interact with the app across sessions.

    Third-Party Data Sharing

    User data is shared with the following third-party services:

    • Bugsnag - Crash reporting and error tracking
    • Firebase Cloud Messaging - Push notification delivery
    • Apollo GraphQL - Data querying and communication layer
    • OkHttp3 - Network request handling
    • AndroidX Jetpack - Core framework components
    • RxJava - Asynchronous operations
    • Dagger/Hilt - Internal dependency management
    • Widevine DRM - Content protection for streamed media

    Understanding the Scores

    CategoryScore
    Security52/100
    Privacy68/100
    Data Security55/100
    Network Security40/100
    Code Safety62/100
    Data Collection70/100
    Data Sharing85/100
    User Control65/100

    Positive Security Features

    • Content protection for streamed media is handled through an established digital rights management system, helping safeguard streamed content.
    • Push notifications are delivered through a well-maintained third-party messaging service with a consistent update cadence.

    Areas for Improvement

    • Network communication protections should be strengthened to better protect user account activity and content accessed while streaming.
    • The range of data shared with crash-reporting and analytics services could be narrowed to reduce how much user activity is visible to outside parties.
    • Options for controlling and limiting behavioral data collection could be made more accessible within the app settings.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect security and privacy practices observed at the time of the scan and may not capture all risks or changes introduced in subsequent updates.

    App Details

    FieldValue
    Package IDcom.netflix.mediaclient
    Version9.42.0 build 8 63616
    PlatformAndroid
    Scan DateDecember 19, 2025

    Right of Reply

    Developer not yet contacted