CITT

    Scan results

    Centraal Beheer

    Android

    Manage insurance, banking, and investment accounts with Centraal Beheer. View policies, report claims with photos, trade investment funds, transfer savings, and contact support via in-app chat. Rated 4.4 stars with 500K+ downloads.

    CITT SCORE
    60
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Centraal Beheer customers comfortable with standard

    What It Means For You

    Usage patterns and in-app behavior are tracked by Firebase, Google Analytics, and Microsoft App Center. A third-party firm, Celebrus Technologies, also collects user activity data. Account and policy information is transmitted, and some protections around how that data travels could be stronger.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (18)

    Data Security

    3 total
    1 Critical
    2 Medium

    Network Security

    5 total
    1 Critical
    1 High
    2 Medium
    1 Low

    Code Security

    3 total
    1 High
    1 Medium
    1 Low

    Privacy

    5 total
    1 Critical
    2 High
    1 Medium
    1 Low

    Third-Party Risk

    2 total
    1 High
    1 Medium

    Third-Party Services

    Firebase Analytics, Google Analytics, Firebase Crashlytics, Firebase Performance Monitoring, Google Tag Manager, Microsoft App Center, Usabilla, Celebrus Technologies, Sitecore Content Hub, Apollo GraphQL, OkHttp, Retrofit

    Security Strengths

    • ✓SQLCipher AES-256 encryption for sensitive data storage
    • ✓Google Tink AES-256-GCM for EncryptedSharedPreferences
    • ✓Android Keystore hardware-backed key storage
    • ✓Secure WebView implementation with no JavaScript interfaces and file access disabled
    • ✓HTTPS-only enforcement with cleartext traffic disabled
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    insurance
    banking
    investment
    sensitive data
    ads
    analytics heavy
    biometric
    chat

    Package

    nl.centraalbeheer.centraalbeheerapp

    Version

    7.49.0

    Analysis Date

    Jan 25, 2026

    Classes Analyzed

    1,846

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (1 critical, 2 medium)

    Network Security - 5 findings (1 critical, 1 high, 2 medium, 1 low)

    Code Safety - 0 findings

    Privacy - 5 findings (1 critical, 2 high, 1 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    The app collects behavioral and usage data across multiple channels. Firebase Analytics and Google Analytics record how users navigate and interact with features. Microsoft App Center collects session and diagnostic data. Celebrus Technologies and Usabilla gather additional interaction and behavioral signals. Sitecore Content Hub may process content-related usage information tied to the user session.

    Third-Party Data Sharing

    User activity data flows to at least nine external services. Google Tag Manager coordinates data routing across Google's advertising and analytics ecosystem. Celebrus Technologies receives behavioral profiles that extend beyond the app's core insurance functions. Usabilla shares feedback and interaction data with its parent organization. Firebase Crashlytics and Firebase Performance Monitoring transmit diagnostic information to Google's infrastructure.

    Understanding the Scores

    CategoryScore
    Security65/100
    Privacy55/100
    Data Security70/100
    Network Security65/100
    Code Safety75/100
    Data Collection50/100
    Data Sharing45/100
    User Control60/100

    Positive Security Features

    • The app uses well-maintained, industry-standard networking libraries (OkHttp, Retrofit) that receive regular security updates from their maintainers.
    • Apollo GraphQL provides a structured approach to data requests, which limits the surface area for unintended data exposure during server communication.

    Areas for Improvement

    • The protections governing how account and policy data travels between the app and servers have gaps that could be closed with stronger safeguards.
    • Behavioral data is routed to a large number of third-party organizations, several of which operate beyond the user's direct awareness or control.
    • The app provides limited built-in options for users to review or restrict what information is collected during normal use.

    About This Analysis

    This scorecard is based on automated static analysis of the app's compiled code and configuration. Scores reflect the app's state at the time of the scan and may change as the app is updated.

    App Details

    • App Name: Centraal Beheer
    • Package ID: nl.centraalbeheer.centraalbeheerapp
    • Version: 7.49.0
    • Scan Date: January 25, 2026

    Right of Reply

    Developer not yet contacted