NRC - Nieuws en achtergronden Security & Privacy Scorecard
Android
Reading habits and article interactions are tracked by several analytics services, including Chartbeat, comScore, and Parsely, to measure audience behavior. Firebase Analytics also collects usage data. Network connections are handled securely, and users remain in control of their data through a built-in consent tool.
Best for
Dutch news readers who value clean, secure apps
Findings
- 0 critical
- 1 high
- 5 medium
- 2 low
- 6 info
1 issue identified across security and privacy analysis.
Top security issues
- Session Tokens Stored in Plain SharedPreferences
- Push Token Stored in Plain SharedPreferences and Logged
- JavaScript Interfaces Exposed to Article WebView
Top privacy issues
- Analytics SDKs Initialized Before Consent Dialog
- Unencrypted Backup of Settings and Device ID
- Multiple Analytics SDKs Present
Full analysis
NRC - Nieuws en achtergronden
App: NRC - Nieuws en achtergronden
Version: 5.12.16 (Build 618)
Analyzed: 2026-03-05
Platform: Android
What This Means for You
Reading habits and article interactions are tracked by several analytics services, including Chartbeat, comScore, and Parsely, to measure audience behavior. Firebase Analytics also collects usage data. Network connections are handled securely, and users remain in control of their data through a built-in consent tool.
Recommendation: Trustworthy
Best For: Dutch news readers who value clean, secure apps
Key Findings
Data Security - 4 findings (1 high, 1 medium, 2 info)
Network Security - 3 findings (3 info)
Code Safety - 0 findings
Privacy - 3 findings (2 medium, 1 low)
Privacy Concerns
What Data is Collected
The app collects reading habits, article interactions, and device diagnostics. Firebase Analytics and Mediahuis Analytics gather behavioral data about how users engage with content. Firebase Crashlytics collects diagnostic information when the app encounters problems.
Third-Party Data Sharing
Usage data is shared with the following third-party services:
- Chartbeat - Audience analytics and content performance measurement
- comScore - Digital audience measurement
- Parsely - Content analytics and audience insights
- Firebase Analytics - Usage analytics by Google
- Firebase Crashlytics - Crash reporting by Google
- Firebase Messaging - Push notifications by Google
- Firebase Remote Config - App configuration by Google
- Firebase Performance - Performance monitoring by Google
- Firebase Sessions - Session tracking by Google
- Google Play Billing - Payment processing
- Google Play Services - Core Google platform services
- Didomi CMP - Consent management platform
- Mediahuis Analytics - Publisher analytics
Understanding the Scores
| Category | Score |
|---|---|
| Security | 87/100 |
| Privacy | 92/100 |
| Data Security | 83/100 |
| Network Security | 100/100 |
| Code Safety | 96/100 |
| Data Collection | 92/100 |
| Data Sharing | 100/100 |
| User Control | 96/100 |
Positive Security Features
- Network communications are handled securely using modern protocols
- A built-in consent management tool (Didomi) gives users direct control over data collection preferences
- Code safety practices are robust, reflecting careful development standards
- Crash reporting relies on established, reputable services rather than custom-built solutions
Areas for Improvement
- Some data storage practices could be strengthened to better protect user information
- The app integrates several analytics services that together build a detailed picture of user reading behavior; consolidating these would further protect privacy
- Greater transparency about which third parties receive user data would help users make more informed choices
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration.
App Details
- App Name: NRC - Nieuws en achtergronden
- Package: com.twipemobile.nrc
- Version: 5.12.16 (Build 618)
- Scan Date: 2026-03-05
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 90/100 |