Etos Security & Privacy Scorecard
Android
User activity and contact details are shared with Salesforce for marketing purposes, enabling personalized promotions based on shopping behavior. Firebase tracks crashes and delivers push notifications, while payment data is handled by Adyen and Cash App Pay. Users have limited control over how their data is used once shared with these third parties.
Best for
Etos shoppers comfortable with marketing analytics
Findings
- 0 critical
- 4 high
- 4 medium
- 2 low
- 7 info
1 issue identified across security and privacy analysis.
Top security issues
- WebView HTTP Authentication Credentials Stored in Plaintext SQLite
- Main App SQLite Databases Use No Encryption
- Firebase Cloud Messaging Tokens in Plain SharedPreferences
Top privacy issues
- Pre-Consent Marketing SDK Initialization
- No Consent Management Platform Detected
- Advertising ID Collection Without Consent
Full analysis
Etos
Version: 3.67.0 (Build 1040244)
Scan Date: 2026-03-04
Security Score: 78/100
Privacy Score: 58/100
What This Means for You
User activity and contact details are shared with Salesforce for marketing purposes, enabling personalized promotions based on shopping behavior. Firebase tracks crashes and delivers push notifications, while payment data is handled by Adyen and Cash App Pay. Users have limited control over how their data is used once shared with these third parties.
Recommendation: Use With Caution
Best For: Etos shoppers comfortable with marketing analytics
Key Findings
Data Security - 4 findings (1 high, 2 medium, 1 low)
Network Security - 0 findings
Code Safety - 0 findings
Privacy - 5 findings (3 high, 2 medium)
Privacy Concerns
What Data is Collected
The app collects contact information, shopping activity, browsing behavior, and device identifiers. This data supports the loyalty program, personalized offers, and app performance monitoring.
Third-Party Data Sharing
User data is shared with the following services:
- Salesforce Marketing Cloud - receives contact and behavioral data for personalized marketing campaigns
- Firebase (Crashlytics, Cloud Messaging) - collects device and performance data, delivers push notifications
- Adyen Payment Processing - processes payment transactions
- Cash App Pay - processes payments made via Cash App
- Google Maps - provides location and mapping features
- Mopinion - collects in-app feedback and usage information
- AppAuth - manages authentication
Understanding the Scores
| Category | Score |
|---|---|
| Security | 78/100 |
| Privacy | 58/100 |
| Data Security | 70/100 |
| Network Security | 100/100 |
| Code Safety | 100/100 |
| Data Collection | 62/100 |
| Data Sharing | 68/100 |
| User Control | 55/100 |
Positive Security Features
- Network connections are secured, protecting user data while it travels between the device and the app's servers.
- The app's code structure shows no safety concerns, reducing the risk of unexpected behavior.
Areas for Improvement
- Contact and behavioral data is shared with marketing platforms, with limited options for users to restrict how it is used for advertising purposes.
- Data collection extends to behavioral profiling that goes beyond what is needed for core shopping features.
- User controls for managing data preferences are limited, leaving users with little ability to adjust how their information is handled once it is shared with third parties.
About This Analysis
This scorecard reflects the security and privacy practices found in the app version listed below.
App Details
- App Name: Etos
- Package ID: nl.etos.mijnetos
- Version: 3.67.0 (Build 1040244)
- Scan Date: 2026-03-04
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #3 (current) | 68/100 | |
| #2 | 62/100 |