De Bijenkorf – Online shopping Security & Privacy Scorecard
Android
User data is shared with very few third parties, and users retain strong control over their personal information. A small number of analytics and feedback tools collect usage data, but advertising trackers are absent. One network-level concern means data in transit carries some risk on untrusted connections.
Best for
Dutch shoppers who value privacy over security
Findings
- 1 critical
- 2 high
- 5 medium
- 2 low
- 4 info
1 issue identified across security and privacy analysis.
Top security issues
- Cleartext Traffic Enabled in AndroidManifest
- Password Stored with Base64 Encoding Only
- Selligent Private Key Hardcoded in Application Class
Top privacy issues
- Pre-Consent Marketing SDK Initialization
- Authentication Tokens Stored in SharedPreferences with Fallback Risk
- Selligent SDK WebView Loads Backend-Controlled Content with JavaScript
Full analysis
De Bijenkorf - Online shopping
Version: 8.39.0
Scan Date: 2026-03-05
What This Means for You
User data is shared with very few third parties, and users retain strong control over their personal information. A small number of analytics and feedback tools collect usage data, but advertising trackers are absent. One network-level concern means data in transit carries some risk on untrusted connections.
Recommendation: Use With Caution
Best For: Dutch shoppers who value privacy over security
Key Findings
Data Security - 2 findings (1 high, 1 medium)
Network Security - 2 findings (1 critical, 1 medium)
Code Safety - 0 findings
Privacy - 1 finding (1 medium)
Privacy Concerns
What Data is Collected
The app collects usage and performance data through analytics integrations. Crash reports and app stability information are gathered automatically. Location data may be accessed for store location features. Feedback data is collected when users choose to respond to in-app prompts.
Third-Party Data Sharing
The app shares data with the following third parties:
- Selligent Mobile SDK - Marketing and customer engagement
- Mopinion - In-app feedback collection
- Firebase (Crashlytics, Cloud Messaging, Remote Config, Performance) - Crash reporting, push notifications, and app performance monitoring (Google)
- Google Maps API - Store location and mapping
- Google Play Services Vision - On-device image processing
- Adyen 3DS2 - Secure payment processing
- Salesforce Marketing Cloud - Marketing communications
Understanding the Scores
| Category | Score |
|---|---|
| Security | 64/100 |
| Privacy | 88/100 |
| Data Security | 68/100 |
| Network Security | 72/100 |
| Code Safety | 82/100 |
| Data Collection | 92/100 |
| Data Sharing | 97/100 |
| User Control | 98/100 |
Positive Security Features
- Data sharing is tightly controlled, with only seven third parties having access to user information.
- Users retain strong control over their personal information, reflected in a 98/100 User Control score.
- The app's code achieved a strong 82/100 Code Safety score.
- Payment processing uses Adyen 3DS2, a dedicated payment authentication framework.
Areas for Improvement
- Data stored on the device is not fully secured, which poses a risk if the device is accessed by someone else.
- Connections to the app's servers carry some risk of interception on unsecured networks, such as public Wi-Fi.
- Not all network traffic uses the highest available level of protection.
About This Analysis
This scorecard is based on automated static analysis of the app's code and behavior patterns. Scores reflect observed practices at the time of the scan and may not capture all risks.
App Details
- App Name: De Bijenkorf - Online shopping
- Package ID: nl.debijenkorf
- Version: 8.39.0
- Scan Date: 2026-03-05
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 76/100 |