Netflix Security & Privacy Scorecard
Android
App activity and device data is shared with crash-reporting and messaging services. Network protections have notable gaps, which may leave user account activity with less protection than expected under certain conditions. Viewing habits and usage patterns are collected to support the service.
Best for
Everyday streaming with standard crash reporting
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- JavaScript Authentication Bypass via WebView Bridge
- Cleartext HTTP Traffic Allowed for Bootstrap Domains
- All Local Databases Stored Without Encryption
Top privacy issues
- Kids Profile PIN Token Stored in Plaintext
- Viewing History Stored with Millisecond Precision Unencrypted
- Comprehensive UI Tracking Without Opt-Out
Full analysis
Netflix
Version: 9.42.0 build 8 63616
Platform: Android
Scan Date: December 19, 2025
What This Means for You
App activity and device data is shared with crash-reporting and messaging services. Network protections have notable gaps, which may leave user account activity with less protection than expected under certain conditions. Viewing habits and usage patterns are collected to support the service.
Recommendation: Use With Caution
Best For: Everyday streaming with standard crash reporting
Key Findings
Data Security - 3 findings (1 critical, 2 high)
Network Security - 6 findings (3 critical, 1 high, 1 medium, 1 low)
Code Safety - 0 findings
Privacy - 9 findings (2 high, 5 medium, 2 low)
Privacy Concerns
What Data is Collected
Netflix collects viewing habits, device information, app activity, and usage patterns. This includes what content is watched, how long it is watched, and how users interact with the app across sessions.
Third-Party Data Sharing
User data is shared with the following third-party services:
- Bugsnag - Crash reporting and error tracking
- Firebase Cloud Messaging - Push notification delivery
- Apollo GraphQL - Data querying and communication layer
- OkHttp3 - Network request handling
- AndroidX Jetpack - Core framework components
- RxJava - Asynchronous operations
- Dagger/Hilt - Internal dependency management
- Widevine DRM - Content protection for streamed media
Understanding the Scores
| Category | Score |
|---|---|
| Security | 52/100 |
| Privacy | 68/100 |
| Data Security | 55/100 |
| Network Security | 40/100 |
| Code Safety | 62/100 |
| Data Collection | 70/100 |
| Data Sharing | 85/100 |
| User Control | 65/100 |
Positive Security Features
- Content protection for streamed media is handled through an established digital rights management system, helping safeguard streamed content.
- Push notifications are delivered through a well-maintained third-party messaging service with a consistent update cadence.
Areas for Improvement
- Network communication protections should be strengthened to better protect user account activity and content accessed while streaming.
- The range of data shared with crash-reporting and analytics services could be narrowed to reduce how much user activity is visible to outside parties.
- Options for controlling and limiting behavioral data collection could be made more accessible within the app settings.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect security and privacy practices observed at the time of the scan and may not capture all risks or changes introduced in subsequent updates.
App Details
| Field | Value |
|---|---|
| Package ID | com.netflix.mediaclient |
| Version | 9.42.0 build 8 63616 |
| Platform | Android |
| Scan Date | December 19, 2025 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 58/100 | |
| #1 | 75/100 |