CITT

    Scan results

    De Bijenkorf – Online shopping

    Android

    De Bijenkorf's online shopping app offers fashion, beauty, and lifestyle products with convenient features like product scanning, wishlist management, and gift card support. Browse leading brands, access member benefits including free delivery over €50, and enjoy easy returns.

    CITT SCORE
    76
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Dutch shoppers who value privacy over security

    What It Means For You

    User data is shared with very few third parties, and users retain strong control over their personal information. A small number of analytics and feedback tools collect usage data, but advertising trackers are absent. One network-level concern means data in transit carries some risk on untrusted connections.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (10)

    Data Security

    2 total
    1 High
    1 Medium

    Network Security

    2 total
    1 Critical
    1 Medium

    Code Security

    3 total
    1 High
    1 Medium
    1 Low

    Privacy

    1 total
    1 Medium

    Third-Party Risk

    2 total
    1 Medium
    1 Low

    Third-Party Services

    Selligent Mobile SDK, Mopinion, Firebase (Crashlytics, Cloud Messaging, Remote Config, Performance), Google Maps API, Google Play Services Vision, Adyen 3DS2, Salesforce Marketing Cloud

    Security Strengths

    • ✓All production APIs use HTTPS
    • ✓EncryptedSharedPreferences with AES-256-GCM for most data
    • ✓SQLCipher database encryption
    • ✓Android Keystore integration
    • ✓Firebase Analytics disabled by default
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    location
    camera
    ads

    Package

    nl.debijenkorf

    Version

    8.39.0

    Analysis Date

    Mar 5, 2026

    Classes Analyzed

    21,906

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (1 high, 1 medium)

    Network Security - 2 findings (1 critical, 1 medium)

    Code Safety - 0 findings

    Privacy - 1 finding (1 medium)

    Privacy Concerns

    What Data is Collected

    The app collects usage and performance data through analytics integrations. Crash reports and app stability information are gathered automatically. Location data may be accessed for store location features. Feedback data is collected when users choose to respond to in-app prompts.

    Third-Party Data Sharing

    The app shares data with the following third parties:

    • Selligent Mobile SDK - Marketing and customer engagement
    • Mopinion - In-app feedback collection
    • Firebase (Crashlytics, Cloud Messaging, Remote Config, Performance) - Crash reporting, push notifications, and app performance monitoring (Google)
    • Google Maps API - Store location and mapping
    • Google Play Services Vision - On-device image processing
    • Adyen 3DS2 - Secure payment processing
    • Salesforce Marketing Cloud - Marketing communications

    Understanding the Scores

    CategoryScore
    Security64/100
    Privacy88/100
    Data Security68/100
    Network Security72/100
    Code Safety82/100
    Data Collection92/100
    Data Sharing97/100
    User Control98/100

    Positive Security Features

    • Data sharing is tightly controlled, with only seven third parties having access to user information.
    • Users retain strong control over their personal information, reflected in a 98/100 User Control score.
    • The app's code achieved a strong 82/100 Code Safety score.
    • Payment processing uses Adyen 3DS2, a dedicated payment authentication framework.

    Areas for Improvement

    • Data stored on the device is not fully secured, which poses a risk if the device is accessed by someone else.
    • Connections to the app's servers carry some risk of interception on unsecured networks, such as public Wi-Fi.
    • Not all network traffic uses the highest available level of protection.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and behavior patterns. Scores reflect observed practices at the time of the scan and may not capture all risks.

    App Details

    • App Name: De Bijenkorf - Online shopping
    • Package ID: nl.debijenkorf
    • Version: 8.39.0
    • Scan Date: 2026-03-05
    • Platform: Android

    Right of Reply

    Developer not yet contacted