United Airlines Security & Privacy Scorecard
Android
Travel habits, location, and in-app behavior are shared with multiple advertising and analytics companies including Kochava and Google Ads. Payment activity passes through several third-party processors. Precise location is tracked via Radar even outside active trips.
Best for
United flyers comfortable with broad data sharing
Avoid if
You minimize sharing of location and travel data
Findings
- 4 critical
- 8 high
- 6 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Cyberfend SDK Universal File Access
- Boarding Pass Barcodes Stored Unencrypted
- WebView Debugging Enabled in Production
Top privacy issues
- QuantumMetric Captures All Network Traffic
- Radar SDK Continuous Background Location Tracking
- MileagePlus Number in All Analytics Events
Full analysis
United Airlines
What This Means for You
Travel habits, location, and in-app behavior are shared with multiple advertising and analytics companies including Kochava and Google Ads. Payment activity passes through several third-party processors. Precise location is tracked via Radar even outside active trips.
Recommendation: Use With Caution
Best For: United flyers comfortable with broad data sharing
Avoid If: You minimize sharing of location and travel data
Key Findings
Data Security - 5 findings (1 critical, 4 high)
Network Security - 1 finding (1 medium)
Code Safety - 0 findings
Privacy - 5 findings (1 critical, 2 high, 2 medium)
Privacy Concerns
What Data is Collected
United Airlines collects precise location, travel history, payment details, device identifiers, and in-app behavior. Location data is gathered continuously via Radar, including when users are not on an active trip. Behavioral data such as screen interactions, searches, and booking activity is recorded by QuantumMetric and Snowplow.
Third-Party Data Sharing
User data is shared with a wide range of third parties across advertising, analytics, payments, and customer support:
- Advertising and tracking: Kochava, Google Ads, InMobile
- Behavioral analytics: QuantumMetric, Snowplow, Firebase Analytics
- Location services: Radar, LocusLabs, Google Maps
- Payment processing: PayPal, Paze, Masterpass, Uplift, Cartrawler
- Identity and fraud detection: Jumio, Cyberfend (Akamai BotMan)
- Customer support: LivePerson
- Consent management: Securiti Mobile CMP
Understanding the Scores
| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 30/100 |
| Data Security | 25/100 |
| Network Security | 65/100 |
| Code Safety | 20/100 |
| Data Collection | 40/100 |
| Data Sharing | 35/100 |
| User Control | 70/100 |
Positive Security Features
- No positive security practices were identified in this version of the app.
Areas for Improvement
- Precise location is collected and shared with third-party services continuously, with limited ability to opt out while using core app features.
- Payment and identity information passes through multiple external processors, increasing the number of parties that handle user financial data.
- In-app behavior and travel patterns are shared with advertising networks, contributing to a detailed profile used for ad targeting.
About This Analysis
This scorecard is based on static analysis of the app binary and reflects the security and privacy posture at the time of analysis.
App Details
- App: United Airlines
- Package: com.united.mobile.android
- Version: 4.2.65 (Build 3587)
- Scan Date: 2026-02-12
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 32/100 |