CITT

    Scan results

    Plex: Find Movies & TV Shows

    Android

    Plex: Stream Movies & TV - Discover and stream 600+ free TV channels, 50,000+ movies and shows from all your streaming services in one app. Create a universal watchlist and enjoy free live TV, rentals, and a personal media server.

    CITT SCORE
    68
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Media enthusiasts comfortable with standard analytics

    What It Means For You

    Viewing habits and app interactions are tracked by multiple analytics and marketing services, including session recording tools that can capture in-app behavior. Usage data is shared with advertising and attribution platforms to measure engagement. Strong control settings are available, but those third-party connections are active by default.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (9)

    Data Security

    3 total
    2 High
    1 Medium

    Network Security

    2 total
    1 Critical
    1 High

    Code Security

    2 total
    1 Medium
    1 Low

    Privacy

    2 total
    2 Medium

    Third-Party Services

    FullStory, Sentry, Iterable, Kochava, Firebase, Vizbee, Google Play Services

    Security Strengths

    • ✓Conscrypt TLS 1.3 cryptographic provider
    • ✓Backup disabled (prevents ADB extraction)
    • ✓Release build with debugging disabled
    • ✓Heavy ProGuard/R8 code obfuscation
    • ✓No custom SSL error handlers that bypass validation
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    entertainment
    sensitive data
    ads
    location
    session recording

    Package

    com.plexapp.android

    Version

    2026.0.0 (Build 966828661)

    Analysis Date

    Jan 29, 2026

    Classes Analyzed

    14,266

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (2 high, 1 medium)

    Network Security - 2 findings (1 critical, 1 high)

    Code Safety - 0 findings

    Privacy - 2 findings (2 medium)

    Privacy Concerns

    What Data is Collected

    Plex collects data about viewing activity, in-app behavior, and device information. Session recording tools can capture detailed interactions within the app, including what users tap, how long they spend on screens, and navigation patterns throughout the app.

    Third-Party Data Sharing

    User data is shared with multiple third-party services:

    • FullStory - Captures detailed session recordings of in-app interactions and behavior
    • Kochava - Tracks advertising attribution and measures marketing campaign performance against user activity
    • Iterable - Powers targeted marketing messages and communications based on usage
    • Firebase - Collects analytics data on how the app is used and app performance metrics
    • Sentry - Monitors app errors and technical performance
    • Vizbee - Enables cross-device content casting coordination
    • Google Play Services - Core Android platform integration

    Understanding the Scores

    CategoryScore
    Security65/100
    Privacy70/100
    Data Security60/100
    Network Security55/100
    Code Safety75/100
    Data Collection65/100
    Data Sharing70/100
    User Control100/100

    Positive Security Features

    • User privacy controls are comprehensive, earning a perfect 100/100 score, giving users meaningful options to manage how their data is handled within the app.

    Areas for Improvement

    • Network communication protections are not fully in place, with the most serious findings related to how data is sent and received over the internet.
    • On-device data storage practices could be strengthened to better protect personal information and viewing history stored on the device.
    • Multiple analytics and session recording services are active by default. Reviewing and adjusting the app's privacy settings before extended use is strongly recommended.

    About This Analysis

    This scorecard is generated through automated static analysis of the app's code and configuration. Scores reflect the security and privacy practices observed at the time of analysis and may not capture changes introduced in subsequent app updates.

    App Details

    • App: Plex: Stream Movies & TV
    • Package: com.plexapp.android
    • Version: 2026.0.0 (Build 966828661)
    • Scan Date: January 29, 2026

    Right of Reply

    Developer not yet contacted