NS Security & Privacy Scorecard

NS

nl.ns.android.activity | Version 8.39.2 (build 32607) | Scanned 2026-03-04

NS is the official app from Nederlandse Spoorwegen for planning journeys, buying tickets, and checking live departure times across the Netherlands.

What This Means for You

Usage patterns and behavior are tracked by multiple analytics platforms, including Amplitude and Snowplow, and data flows into a customer data platform for personalization. A consent tool is present, giving users some control over what is collected. Crash and error data is shared with Firebase and Datadog.

Recommendation: Acceptable

Best For: Daily train travelers comfortable with analytics

Key Findings

Data Security - 8 findings (1 high, 1 medium, 1 low, 5 info)

Network Security - 2 findings (2 low)

Code Safety - 0 findings

Privacy - 3 findings (2 medium, 1 low)

Privacy Concerns

What Data is Collected

The app collects data about how users interact with it, including which screens are visited, features tapped, and journey patterns. Device identifiers, crash reports, and performance metrics are also collected. Location and payment data may be gathered when journey planning or ticketing features are used.

Third-Party Data Sharing

User data is shared with the following third-party services:

• Amplitude Analytics and Amplitude Experiment - behavioral analytics and feature testing
• Snowplow Analytics - event tracking and behavioral data
• BlueConic - customer data platform used to personalize the user experience
• OneTrust - consent management, giving users control over some data sharing choices
• Datadog - performance monitoring and error reporting
• Firebase Crashlytics, Firebase Messaging, Firebase Remote Config (Google) - crash reporting, push notifications, and app configuration
• Qualtrics Digital - in-app surveys and customer feedback
• Google Maps - mapping and navigation
• Avo Inspector - analytics data quality tracking

Understanding the Scores

Positive Security Features

No standout positive security practices were identified in this version of the app.

Areas for Improvement

• Stronger local data protection: Some data stored on the device could benefit from additional safeguards if the device is accessed without authorization.
• Clearer analytics disclosure: The app works with a large number of analytics and tracking services. More transparent in-app explanations would help users understand what is collected and why.
• Tighter network configurations: A small number of network connections use settings that could be made more restrictive to reduce potential exposure.

About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. It reflects practices observed in the version listed below.

App Details

• App Name: NS
• Package ID: nl.ns.android.activity
• Version: 8.39.2 (build 32607)
• Developer: NS
• Scan Date: 2026-03-04
• Platform: Android