Xfinity Stream Security & Privacy Scorecard
Android
Viewing habits, device activity, and usage patterns are tracked by multiple analytics and advertising companies including Adobe, Nielsen, Google, and Oracle BlueKai. The data is used to build ad profiles and measure audiences across platforms. Users have limited control over this data collection.
Best for
Xfinity subscribers comfortable with broad data sharing
Avoid if
You want to limit ad targeting and data profiling
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- BlueKai HTTP Script Loading in WebView
- Adobe Analytics Transmitted Over HTTP
- Authentication Tokens Logged in Plaintext
Top privacy issues
- WiFi SSID Tracking Without Consent
- Adobe Analytics Transmitted Over HTTP
- No Granular Analytics Consent Controls
Full analysis
Xfinity Stream
Version: 8.13.0.2840 | Platform: Android | Analyzed: 2026-01-31
Security Score: 72/100 | Privacy Score: 65/100
What This Means for You
Viewing habits, device activity, and usage patterns are tracked by multiple analytics and advertising companies including Adobe, Nielsen, Google, and Oracle BlueKai. The data is used to build ad profiles and measure audiences across platforms. Users have limited control over this data collection.
Recommendation: Use With Caution
Best For: Xfinity subscribers comfortable with broad data sharing
Avoid If: You want to limit ad targeting and data profiling
Key Findings
Data Security - 1 finding (1 medium)
Network Security - 4 findings (1 critical, 3 medium)
Code Safety - 0 findings
Privacy - 4 findings (1 critical, 1 high, 2 medium)
Privacy Concerns
What Data is Collected
The app collects viewing habits, device identifiers, usage patterns, and behavioral signals. This data is used to measure audiences, personalize content recommendations, and deliver targeted advertising.
Third-Party Data Sharing
Data is shared with the following third-party services:
- Adobe Analytics
- Nielsen Digital Measurement
- Sift Science
- Firebase Analytics
- Google Analytics
- Firebase Crashlytics
- Firebase Cloud Messaging
- Firebase Remote Config
- Google Play Services Cast
- FreeWheel
- Oracle BlueKai
Understanding the Scores
| Category | Score |
|---|---|
| Security | 72/100 |
| Privacy | 65/100 |
| Data Security | 85/100 |
| Network Security | 68/100 |
| Code Safety | 80/100 |
| Data Collection | 60/100 |
| Data Sharing | 62/100 |
| User Control | 55/100 |
Positive Security Features
- No standout positive security practices were identified in this version of the app.
Areas for Improvement
- User data is shared with over ten advertising and analytics services, including behavioral profiling platforms such as Oracle BlueKai and FreeWheel, giving a wide range of companies access to viewing activity and device usage.
- User control over data collection and use is limited, reflected in a User Control score of 55/100, with no clear in-app options to opt out of audience measurement or advertising data use.
- Data sent between the app and remote services may travel with less protection than expected.
About This Analysis
This scorecard is based on static analysis of the app binary and configuration at the version listed below. Scores reflect observed data practices, third-party integrations, and security configuration at the time of analysis.
App Details
- App Name: Xfinity Stream
- Package ID: com.xfinity.cloudtvr
- Version: 8.13.0.2840
- Scan Date: 2026-01-31
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 68/100 |