ImmoScout24 - Real Estate Security & Privacy Scorecard
Android
Search activity, browsing behavior, and interactions are shared with Google, Adjust, and several other advertising and analytics companies to build a profile for targeted ads. Iterable and Tealium further route user data for marketing purposes. User data is handled by a broad network of third parties beyond the app itself.
Best for
House hunters comfortable with ad targeting
Findings
- 2 critical
- 1 high
- 3 medium
- 5 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Unencrypted OAuth Tokens in SharedPreferences
- Open Redirect via Deep Link - Arbitrary URL Loading
- Contact Form Database Contains Unencrypted PII and Financial Data
Top privacy issues
- Contact Form Database Contains Unencrypted PII and Financial Data
- Saved Search Database Contains Unencrypted Search History
- Notification Center Database Contains Unencrypted Message Snippets
Full analysis
ImmoScout24 - Real Estate
de.is24.android | Version 29.7.2.1514-202602121418 | Scanned: 2026-02-16
Overall Security: 45/100 | Privacy: 55/100
What This Means for You
Search activity, browsing behavior, and interactions are shared with Google, Adjust, and several other advertising and analytics companies to build a profile for targeted ads. Iterable and Tealium further route user data for marketing purposes. User data is handled by a broad network of third parties beyond the app itself.
Recommendation: Use With Caution
Best For: House hunters comfortable with ad targeting
Key Findings
Data Security - 2 findings (1 critical, 1 high)
Network Security - 5 findings (1 critical, 2 medium, 1 low, 1 info)
Code Safety - 0 findings
Privacy - 3 findings (2 low, 1 info)
Privacy Concerns
What Data is Collected
The app collects property search activity, browsing history, location data, and behavioral patterns across sessions. In-app interactions and property preferences contribute to a usage profile that persists beyond individual sessions.
Third-Party Data Sharing
User data is routed to the following third-party services:
- Google Analytics and Google Ads - behavioral tracking and advertising targeting
- Adjust - marketing attribution and campaign measurement
- Tealium - data aggregation and distribution for marketing purposes
- Iterable - personalized marketing communications and notifications
- Firebase Analytics and Crashlytics - usage monitoring and error reporting
- Embrace SDK - session and performance monitoring
- Optimizely X - in-app testing and feature personalization
- Okta SDK - user authentication services
- UserCentrics CMP - consent and preference management
- Google ARCore and Google Play Services - platform services
Understanding the Scores
| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 55/100 |
| Data Security | 40/100 |
| Network Security | 65/100 |
| Code Safety | 70/100 |
| Data Collection | 85/100 |
| Data Sharing | 90/100 |
| User Control | 85/100 |
Positive Security Features
- None identified in this version.
Areas for Improvement
- How personal data is stored and protected on the device has significant room for improvement, with the most serious issues concentrated in this area.
- Network communication handling has multiple gaps where protections could be strengthened to better guard data traveling between the device and remote servers.
- Property search activity and behavioral data are distributed across a large number of advertising and analytics partners, giving third parties broad visibility into usage patterns with limited ability to opt out.
About This Analysis
This scorecard is generated from static analysis of the app's code and configuration. It reflects the security and privacy posture of the specific version listed below.
App Details
- App: ImmoScout24 - Real Estate
- Package: de.is24.android
- Version: 29.7.2.1514-202602121418
- Scan Date: 2026-02-16
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 50/100 |