Rakuten Viber Messenger Security & Privacy Scorecard
by Viber Media SARL. · iOS
Activity and usage patterns are shared with several advertising and analytics companies, including Facebook and Adjust, which use this data for ad targeting. Users will see advertising from multiple ad networks within the app. The protection applied to network connections falls short in certain conditions, meaning messages may travel with less protection than expected.
Best for
Casual chats and group calls with friends
Avoid if
Sending highly sensitive or confidential messages
Findings
- 1 critical
- 2 high
- 4 medium
- 3 low
- 8 info
1 issue identified across security and privacy analysis.
Top security issues
- App Transport Security Completely Disabled
- Hardcoded HTTP URLs in Application Binary
- Custom URL Schemes with No Input Validation Evidence
Top privacy issues
- Privacy Manifest Tracking Declaration Inconsistency
- Extensive Advertising & Analytics SDK Integration
- Contact Upload with User Consent
Full analysis
Version: 27.5.0 (Build 27.5.0.4) | Analyzed: 2026-03-27
What This Means for You
Activity and usage patterns are shared with several advertising and analytics companies, including Facebook and Adjust, which use this data for ad targeting. Users will see advertising from multiple ad networks within the app. The protection applied to network connections falls short in certain conditions, meaning messages may travel with less protection than expected.
Recommendation: Use With Caution
Best For: Casual chats and group calls with friends
Avoid If: Sending highly sensitive or confidential messages
Key Findings
Data Security - 1 finding (1 medium)
Network Security - 2 findings (1 critical, 1 high)
Code Safety - 0 findings
Privacy - 3 findings (1 high, 2 low)
Privacy Concerns
What Data is Collected
Viber collects behavioral and usage data including interaction patterns, device identifiers, and activity history. This data supports advertising, analytics, and app improvement purposes.
Third-Party Data Sharing
User data is shared with the following third-party services:
- Facebook SDK - Behavioral data for ad targeting
- Adjust - Attribution and usage tracking
- Mixpanel - Usage analytics and behavioral profiling
- BrazeKit - Marketing engagement tracking
- Google AdMob - Advertising personalization
- Amazon APS - Advertising network
- Vungle - Video advertising network
- Firebase - App analytics and performance data
Understanding the Scores
| Category | Score |
|---|---|
| Security | 68/100 |
| Privacy | 75/100 |
| Data Security | 95/100 |
| Network Security | 60/100 |
| Code Safety | 95/100 |
| Data Collection | 82/100 |
| Data Sharing | 90/100 |
| User Control | 88/100 |
Positive Security Features
- Data stored locally on the device is well-protected against unauthorized access
- The app's code includes strong integrity protections
- Payment processing is delegated to established, dedicated payment services rather than custom implementations
Areas for Improvement
- The protection applied to network connections falls short in certain conditions, meaning messages may travel with less protection than expected
- User activity is shared across a large number of advertising and analytics partners, giving users limited visibility into how data moves through the industry
- Ad serving from multiple competing networks increases the volume of behavioral data collected about users during normal use
About This Analysis
This scorecard is based on automated static analysis of the application's code and configuration as of the scan date. It represents the app's security and privacy posture at the time of analysis and may not capture every possible issue.
App Details
| Field | Value |
|---|---|
| Package ID | com.viber |
| Version | 27.5.0 (Build 27.5.0.4) |
| Scan Date | 2026-03-27 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 70/100 |