FD Security & Privacy Scorecard

Android

87
Overall trust score
Trustworthy
81
Security
93
Privacy

Reading habits and app activity are shared with analytics and advertising services including Firebase, Comscore, Chartbeat, Adjust, and Facebook. Ads are served via Google AdMob. Data is handled securely overall, with strong network protections and minimal data sharing beyond these standard third-party tools.

Best for

Dutch news readers comfortable with standard analytics

Findings

  • 0 critical
  • 1 high
  • 6 medium
  • 4 low
  • 4 info

1 issue identified across security and privacy analysis.

Top security issues

  • Authentication Tokens Stored in Plain SharedPreferences
  • Android Backup Enabled Without Exclusion Rules
  • JavaScript Interfaces Exposed Without Origin Validation

Top privacy issues

  • User PII and FCM Token Stored Without Encryption
  • Firebase Analytics Initialization Before Consent Check
  • Exported Deep Link Activities Without Permission Protection

Full analysis

FD

What This Means for You

Reading habits and app activity are shared with analytics and advertising services including Firebase, Comscore, Chartbeat, Adjust, and Facebook. Ads are served via Google AdMob. Data is handled securely overall, with strong network protections and minimal data sharing beyond these standard third-party tools.

Recommendation: Trustworthy

Best For: Dutch news readers comfortable with standard analytics

Key Findings

Data Security - 4 findings (1 high, 1 medium, 1 low, 1 info)

Network Security - 2 findings (1 medium, 1 low)

Code Safety - 0 findings

Privacy - 3 findings (2 medium, 1 info)

Privacy Concerns

What Data is Collected

The app collects information about reading habits, device type, and in-app activity to support content personalization and audience measurement. Firebase Analytics, Chartbeat, and Comscore each gather behavioral data about how users engage with articles. Adjust tracks how users arrived at the app and subsequent activity patterns. Facebook SDK may associate in-app behavior with a broader profile.

Third-Party Data Sharing

Activity data is shared with the following third-party services: Firebase (analytics, crash reporting, and push messaging), Batch (push notifications), Chartbeat (audience measurement), Comscore (media analytics), Adjust (attribution tracking), Facebook SDK (advertising and social targeting), and Google AdMob (advertising delivery). The Data Sharing score of 100/100 reflects that sharing is limited to these declared services with no undisclosed recipients identified.

Understanding the Scores

Category Score
Security 81/100
Privacy 93/100
Data Security 82/100
Network Security 95/100
Code Safety 94/100
Data Collection 94/100
Data Sharing 100/100
User Control 95/100

Positive Security Features

  • Network communications are well-protected, keeping data exchanged between the device and the app's servers secure in transit
  • Data sharing is limited to declared third-party services with no undisclosed recipients identified
  • User control mechanisms score highly, offering meaningful options over how data is handled
  • Code construction follows solid safety practices with no code-level safety concerns identified

Areas for Improvement

  • One higher-priority finding in how the app stores data on the device warrants attention from the developer to better protect locally held information
  • Minor network configuration adjustments would close small gaps in connection handling under certain conditions
  • Reading behavior is shared simultaneously across several analytics and advertising platforms, expanding the overall tracking footprint beyond what a single service would require

About This Analysis

App Details

Field Value
App FD
Package nl.fdmg.fd
Version 2.52.0 (build 152)
Scan Date 2026-03-05

Versions & scan history

ScanDateOverall score
#1 (current) 87/100