Plex: Find Movies & TV Shows Security & Privacy Scorecard
Android
Viewing habits and app interactions are tracked by multiple analytics and marketing services, including session recording tools that can capture in-app behavior. Usage data is shared with advertising and attribution platforms to measure engagement. Strong control settings are available, but those third-party connections are active by default.
Best for
Media enthusiasts comfortable with standard analytics
Findings
- 1 critical
- 3 high
- 5 medium
- 3 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- SSL/TLS Validation Bypass in Vizbee SDK
- Plex Access Tokens Stored in Plain Text (MMKV)
- Global Cleartext HTTP Traffic Permitted
Top privacy issues
- Extensive Analytics Tracking with Multiple SDKs
- FullStory JavaScript Interface on Tracked WebViews
- React Native AsyncStorage Stores Session Data in Plain Text
Full analysis
Plex: Stream Movies & TV
Version: 2026.0.0 (Build 966828661)
Platform: Android
Scan Date: January 29, 2026
What This Means for You
Viewing habits and app interactions are tracked by multiple analytics and marketing services, including session recording tools that can capture in-app behavior. Usage data is shared with advertising and attribution platforms to measure engagement. Strong control settings are available, but those third-party connections are active by default.
Recommendation: Use With Caution
Best For: Media enthusiasts comfortable with standard analytics
Key Findings
Data Security - 3 findings (2 high, 1 medium)
Network Security - 2 findings (1 critical, 1 high)
Code Safety - 0 findings
Privacy - 2 findings (2 medium)
Privacy Concerns
What Data is Collected
Plex collects data about viewing activity, in-app behavior, and device information. Session recording tools can capture detailed interactions within the app, including what users tap, how long they spend on screens, and navigation patterns throughout the app.
Third-Party Data Sharing
User data is shared with multiple third-party services:
- FullStory - Captures detailed session recordings of in-app interactions and behavior
- Kochava - Tracks advertising attribution and measures marketing campaign performance against user activity
- Iterable - Powers targeted marketing messages and communications based on usage
- Firebase - Collects analytics data on how the app is used and app performance metrics
- Sentry - Monitors app errors and technical performance
- Vizbee - Enables cross-device content casting coordination
- Google Play Services - Core Android platform integration
Understanding the Scores
| Category | Score |
|---|---|
| Security | 65/100 |
| Privacy | 70/100 |
| Data Security | 60/100 |
| Network Security | 55/100 |
| Code Safety | 75/100 |
| Data Collection | 65/100 |
| Data Sharing | 70/100 |
| User Control | 100/100 |
Positive Security Features
- User privacy controls are comprehensive, earning a perfect 100/100 score, giving users meaningful options to manage how their data is handled within the app.
Areas for Improvement
- Network communication protections are not fully in place, with the most serious findings related to how data is sent and received over the internet.
- On-device data storage practices could be strengthened to better protect personal information and viewing history stored on the device.
- Multiple analytics and session recording services are active by default. Reviewing and adjusting the app's privacy settings before extended use is strongly recommended.
About This Analysis
This scorecard is generated through automated static analysis of the app's code and configuration. Scores reflect the security and privacy practices observed at the time of analysis and may not capture changes introduced in subsequent app updates.
App Details
- App: Plex: Stream Movies & TV
- Package: com.plexapp.android
- Version: 2026.0.0 (Build 966828661)
- Scan Date: January 29, 2026
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #3 (current) | 68/100 |