MijnKPN Security & Privacy Scorecard
Android
Usage data is collected by analytics and performance monitoring services, including Adobe and AppDynamics. Privacy controls are strong: minimal data is shared with third parties and users retain meaningful control over their information. How account data is stored on the device carries some risk, so the app should be avoided on shared or untrusted phones.
Best for
KPN customers managing their subscription
Findings
- 1 critical
- 3 high
- 3 medium
- 2 low
- 0 info
1 issue identified across security and privacy analysis.
Top security issues
- Hardcoded Encryption Key in BuildConfig
- SSL/TLS Validation Bypass Available via Third-Party Library
- Unencrypted AsyncStorage SQLite Database
Top privacy issues
- Sentry Session Replay at 100% Error Sampling Rate
- Extensive Third-Party SDK Data Collection Surface
- Advertising ID Collection Without Clear Use Case
Full analysis
MijnKPN
Version: 6.38.0
Scan Date: 2026-03-05
What This Means for You
Usage data is collected by analytics and performance monitoring services, including Adobe and AppDynamics. Privacy controls are strong: minimal data is shared with third parties and users retain meaningful control over their information. How account data is stored on the device carries some risk, so the app should be avoided on shared or untrusted phones.
Recommendation: Use With Caution
Best For: KPN customers managing their subscription
Key Findings
Data Security - 3 findings (1 critical, 2 high)
Network Security - 1 finding (1 high)
Code Safety - 0 findings
Privacy - 2 findings (1 medium, 1 low)
Privacy Concerns
What Data is Collected
MijnKPN collects usage and behavioral data through Firebase Analytics and Adobe Experience Cloud. AppDynamics monitors app performance and collects data about how users interact with the app and the device environment. Sentry captures error and crash reports that may include device state and session context.
Third-Party Data Sharing
User data is shared with the following third parties:
- Adobe Experience Cloud - behavioral analytics and personalization
- Firebase Analytics (Google) - usage tracking and event data
- AppDynamics (Cisco) - performance monitoring telemetry
- Sentry - error and crash diagnostics
- OneTrust CMP - consent management (manages user data sharing preferences)
Understanding the Scores
| Category | Score |
|---|---|
| Security | 52 / 100 |
| Privacy | 92 / 100 |
| Data Security | 40 / 100 |
| Network Security | 85 / 100 |
| Code Safety | 90 / 100 |
| Data Collection | 97 / 100 |
| Data Sharing | 98 / 100 |
| User Control | 97 / 100 |
Positive Security Features
- No notable positive security practices were identified in this version of the app.
Areas for Improvement
- Account and session data stored on the device should be protected with stronger safeguards to limit exposure if the phone is accessed without permission.
- Data sent between the app and KPN's servers could use stronger connection protections to reduce the risk of interception.
- Sensitive personal data should be handled with additional care when written to or read from device storage.
About This Analysis
This scorecard is based on automated static analysis of the app binary and does not require installation. Scores reflect the security and privacy posture of the version analyzed and may change with app updates.
App Details
| Field | Value |
|---|---|
| App Name | MijnKPN |
| Package ID | nl.kpn.mijn |
| Version | 6.38.0 |
| Scan Date | 2026-03-05 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 72/100 |