FD Security & Privacy Scorecard
Android
Reading habits and app activity are shared with analytics and advertising services including Firebase, Comscore, Chartbeat, Adjust, and Facebook. Ads are served via Google AdMob. Data is handled securely overall, with strong network protections and minimal data sharing beyond these standard third-party tools.
Best for
Dutch news readers comfortable with standard analytics
Findings
- 0 critical
- 1 high
- 6 medium
- 4 low
- 4 info
1 issue identified across security and privacy analysis.
Top security issues
- Authentication Tokens Stored in Plain SharedPreferences
- Android Backup Enabled Without Exclusion Rules
- JavaScript Interfaces Exposed Without Origin Validation
Top privacy issues
- User PII and FCM Token Stored Without Encryption
- Firebase Analytics Initialization Before Consent Check
- Exported Deep Link Activities Without Permission Protection
Full analysis
FD
What This Means for You
Reading habits and app activity are shared with analytics and advertising services including Firebase, Comscore, Chartbeat, Adjust, and Facebook. Ads are served via Google AdMob. Data is handled securely overall, with strong network protections and minimal data sharing beyond these standard third-party tools.
Recommendation: Trustworthy
Best For: Dutch news readers comfortable with standard analytics
Key Findings
Data Security - 4 findings (1 high, 1 medium, 1 low, 1 info)
Network Security - 2 findings (1 medium, 1 low)
Code Safety - 0 findings
Privacy - 3 findings (2 medium, 1 info)
Privacy Concerns
What Data is Collected
The app collects information about reading habits, device type, and in-app activity to support content personalization and audience measurement. Firebase Analytics, Chartbeat, and Comscore each gather behavioral data about how users engage with articles. Adjust tracks how users arrived at the app and subsequent activity patterns. Facebook SDK may associate in-app behavior with a broader profile.
Third-Party Data Sharing
Activity data is shared with the following third-party services: Firebase (analytics, crash reporting, and push messaging), Batch (push notifications), Chartbeat (audience measurement), Comscore (media analytics), Adjust (attribution tracking), Facebook SDK (advertising and social targeting), and Google AdMob (advertising delivery). The Data Sharing score of 100/100 reflects that sharing is limited to these declared services with no undisclosed recipients identified.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 81/100 |
| Privacy | 93/100 |
| Data Security | 82/100 |
| Network Security | 95/100 |
| Code Safety | 94/100 |
| Data Collection | 94/100 |
| Data Sharing | 100/100 |
| User Control | 95/100 |
Positive Security Features
- Network communications are well-protected, keeping data exchanged between the device and the app's servers secure in transit
- Data sharing is limited to declared third-party services with no undisclosed recipients identified
- User control mechanisms score highly, offering meaningful options over how data is handled
- Code construction follows solid safety practices with no code-level safety concerns identified
Areas for Improvement
- One higher-priority finding in how the app stores data on the device warrants attention from the developer to better protect locally held information
- Minor network configuration adjustments would close small gaps in connection handling under certain conditions
- Reading behavior is shared simultaneously across several analytics and advertising platforms, expanding the overall tracking footprint beyond what a single service would require
About This Analysis
App Details
| Field | Value |
|---|---|
| App | FD |
| Package | nl.fdmg.fd |
| Version | 2.52.0 (build 152) |
| Scan Date | 2026-03-05 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 87/100 |