CITT

    Scan results

    ImmoScout24 - Real Estate

    Android

    ImmoScout24 is Germany's leading real estate platform with 10M+ downloads. Browse, search, and manage property rentals and sales with advanced filters, map-based search, and direct contact with agents. Includes SCHUFA credit checks and moving services integration.

    CITT SCORE
    50
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: House hunters comfortable with ad targeting

    What It Means For You

    Search activity, browsing behavior, and interactions are shared with Google, Adjust, and several other advertising and analytics companies to build a profile for targeted ads. Iterable and Tealium further route user data for marketing purposes. User data is handled by a broad network of third parties beyond the app itself.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (14)

    Data Security

    2 total
    1 Critical
    1 High

    Network Security

    5 total
    1 Critical
    2 Medium
    1 Low
    1 Info

    Code Security

    4 total
    1 Medium
    2 Low
    1 Info

    Privacy

    3 total
    2 Low
    1 Info

    Third-Party Services

    Embrace SDK, Firebase Crashlytics, Optimizely X, Iterable, Adjust, Tealium, Google Analytics, Firebase Analytics, Google Ads, Google Play Services, Okta SDK, SQLCipher, Google ARCore, UserCentrics CMP

    Security Strengths

    • ✓Exemplary consent-first privacy architecture with UserCentrics CMP
    • ✓Comprehensive HTTPS enforcement across all endpoints
    • ✓Modern TLS 1.2+ configuration with proper certificate validation
    • ✓GDPR/CCPA compliant with granular vendor consent management
    • ✓SQL injection protection via Room parameterized queries
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    location
    contacts
    ads

    Package

    de.is24.android

    Version

    29.7.2.1514-202602121418

    Analysis Date

    Feb 16, 2026

    Classes Analyzed

    32,500

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (1 critical, 1 high)

    Network Security - 5 findings (1 critical, 2 medium, 1 low, 1 info)

    Code Safety - 0 findings

    Privacy - 3 findings (2 low, 1 info)

    Privacy Concerns

    What Data is Collected

    The app collects property search activity, browsing history, location data, and behavioral patterns across sessions. In-app interactions and property preferences contribute to a usage profile that persists beyond individual sessions.

    Third-Party Data Sharing

    User data is routed to the following third-party services:

    • Google Analytics and Google Ads - behavioral tracking and advertising targeting
    • Adjust - marketing attribution and campaign measurement
    • Tealium - data aggregation and distribution for marketing purposes
    • Iterable - personalized marketing communications and notifications
    • Firebase Analytics and Crashlytics - usage monitoring and error reporting
    • Embrace SDK - session and performance monitoring
    • Optimizely X - in-app testing and feature personalization
    • Okta SDK - user authentication services
    • UserCentrics CMP - consent and preference management
    • Google ARCore and Google Play Services - platform services

    Understanding the Scores

    CategoryScore
    Security45/100
    Privacy55/100
    Data Security40/100
    Network Security65/100
    Code Safety70/100
    Data Collection85/100
    Data Sharing90/100
    User Control85/100

    Positive Security Features

    • None identified in this version.

    Areas for Improvement

    • How personal data is stored and protected on the device has significant room for improvement, with the most serious issues concentrated in this area.
    • Network communication handling has multiple gaps where protections could be strengthened to better guard data traveling between the device and remote servers.
    • Property search activity and behavioral data are distributed across a large number of advertising and analytics partners, giving third parties broad visibility into usage patterns with limited ability to opt out.

    About This Analysis

    This scorecard is generated from static analysis of the app's code and configuration. It reflects the security and privacy posture of the specific version listed below.

    App Details

    • App: ImmoScout24 - Real Estate
    • Package: de.is24.android
    • Version: 29.7.2.1514-202602121418
    • Scan Date: 2026-02-16

    Right of Reply

    Developer not yet contacted