Williams Sonoma Security & Privacy Scorecard

Williams Sonoma

Package: com.ws.giftregistry | Version: 15.18.5 | Platform: Android | Scanned: 2026-02-17

Overall Security: 68/100 | Overall Privacy: 52/100

What This Means for You

Browsing, purchase activity, and registry choices are shared with multiple marketing and analytics companies, including Adobe Audience Manager and Tealium, to build an advertising profile. User behavior is tracked across sessions by Quantum Metric and Salesforce Marketing Cloud. Users have limited control over what data is collected or how long it is retained.

Recommendation: Use With Caution

Best For: Williams Sonoma shoppers comfortable with broad marketing

Key Findings

Data Security - 8 findings (1 medium, 3 low, 4 info)

Network Security - 5 findings (1 medium, 1 low, 3 info)

Code Safety - 0 findings

Privacy - 3 findings (2 high, 1 medium)

Privacy Concerns

What Data is Collected

The app collects browsing behavior, purchase history, gift registry selections, and device identifiers. This information is routed into multiple analytics and marketing platforms that build profiles of shopping habits and preferences over time.

Third-Party Data Sharing

User activity is shared with the following third parties:

• Salesforce Marketing Cloud - email marketing and customer engagement targeting
• Quantum Metric - session replay and behavioral analytics
• Tealium - data management and audience orchestration
• Adobe Audience Manager - advertising audience profiling
• PingOne Signals - identity and fraud detection signals
• Akamai BotMan - bot and traffic protection
• Braintree - payment processing
• Firebase Crashlytics - crash and error reporting
• Firebase Remote Config - remote app configuration
• Firebase Cloud Messaging - push notifications
• Firebase Performance - performance monitoring
• Constructor.io - product search and discovery analytics
• Bing Maps - mapping and location services

Understanding the Scores

Positive Security Features

• Braintree handles payment card data through a reputable third-party processor, keeping financial details separate from the app's own systems
• Akamai BotMan provides protection against automated attacks on login and checkout flows
• Firebase services (Crashlytics, Performance) are well-established platforms with a strong operational security record

Areas for Improvement

• Shopping behavior and registry activity are distributed across more than a dozen third-party companies, several of which use that data for advertising purposes well beyond Williams Sonoma's direct control.
• There are no clear in-app options to limit behavioral tracking or advertising profiling, leaving users with little practical say over how their data is used after collection.
• Data retention periods are not disclosed within the app, making it difficult to know how long activity history is kept or which third parties continue to hold access to it.

About This Analysis

This scorecard is generated through automated static analysis of the app's code and configuration. Scores reflect security and privacy practices identified at the time of the scan and may change across app versions.

App Details