Pinterest Security & Privacy Scorecard
Android
User activity, interests, and browsing are shared with Facebook, Google Ads, and AppsFlyer to build an ad profile and target users across the web. Firebase and Bugsnag collect usage and crash data. User data touches multiple third-party platforms each time the app is used.
Best for
Visual inspiration browsing with standard ad tracking
Avoid if
You want to limit ad targeting based on your interests
Findings
- 2 critical
- 5 high
- 4 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- OAuth Access Tokens Stored in Plaintext SharedPreferences
- AWS SDK v2.22.6 Contains CVE-2020-8897 (XXE Injection)
- SSO WebView Missing Security Configuration
Top privacy issues
- Firebase Analytics Tracks Users Without Consent
- Advertising ID Collected by 4+ SDKs Without Granular Consent
- Search History Stored Unencrypted in Database
Full analysis
Version: 14.3.0 | Platform: Android | Analyzed: 2026-02-03
What This Means for You
User activity, interests, and browsing are shared with Facebook, Google Ads, and AppsFlyer to build an ad profile and target users across the web. Firebase and Bugsnag collect usage and crash data. User data touches multiple third-party platforms each time the app is used.
Recommendation: Use With Caution
Best For: Visual inspiration browsing with standard ad tracking
Avoid If: You want to limit ad targeting based on your interests
Key Findings
Data Security - 1 finding (1 critical)
Network Security - 4 findings (2 high, 2 medium)
Code Safety - 0 findings
Privacy - 3 findings (1 critical, 1 high, 1 medium)
Privacy Concerns
What Data is Collected
Pinterest collects user browsing activity, saved pins, search history, and interaction patterns. This data builds a detailed profile of user interests and preferences that persists across sessions and informs how users are targeted by advertisers.
Third-Party Data Sharing
User data is shared with the following third-party platforms:
- Facebook SDK - Shares behavioral and interest data for cross-platform ad targeting
- Google Ads SDK - Shares user activity to serve and measure targeted advertising
- AppsFlyer - Tracks in-app actions and attribution for marketing campaigns
- Firebase Analytics - Collects usage patterns and session data
- Bugsnag - Receives crash reports and device diagnostics
- LINE SDK - Enables social sharing with data transfer to LINE's platform
- Eclipse Paho MQTT - Handles real-time messaging with data routed through an external broker
Understanding the Scores
| Category | Score |
|---|---|
| Security | 82/100 |
| Privacy | 75/100 |
| Data Security | 70/100 |
| Network Security | 85/100 |
| Code Safety | 88/100 |
| Data Collection | 78/100 |
| Data Sharing | 80/100 |
| User Control | 75/100 |
Positive Security Features
- Integrates Google Tink, a well-audited cryptographic library, for protecting sensitive data operations
- Uses Bugsnag for real-time crash monitoring, supporting app stability and issue detection
- Employs AWS SDK with established cloud infrastructure security practices
Areas for Improvement
- Stronger on-device data protection is needed: at least one area where sensitive information is stored on the device does not meet adequate security standards
- More consistent network security: some data sent from the app uses weaker transmission settings and may travel with less protection than expected on public Wi-Fi
- Clearer ad tracking controls: user interest and behavioral data flows to multiple advertising platforms, with limited in-app options to restrict or opt out of that sharing
About This Analysis
This scorecard reflects the security and privacy posture of the app at the time of analysis. Scores are based on examination of the app's code, configuration, and third-party integrations. Higher scores indicate stronger practices; lower scores indicate areas where user data or the device may be at greater risk.
App Details
| Field | Value |
|---|---|
| App Name | |
| Package ID | com.pinterest |
| Version | 14.3.0 |
| Platform | Android |
| Scan Date | 2026-02-03 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 78/100 |