Odido Security & Privacy Scorecard

Android

86
Overall trust score
Trustworthy
97
Security
75
Privacy

App usage and behavior is tracked by analytics and marketing platforms, including BlueConic, which builds a profile of users across sessions. Data is handled securely in transit and at rest. Users have moderate control over their data, but some marketing data collection runs in the background without a clear opt-out.

Best for

Odido customers managing their account and plan

Findings

  • 0 critical
  • 1 high
  • 4 medium
  • 2 low
  • 6 info

1 issue identified across security and privacy analysis.

Top security issues

  • Extensive Deep Link Attack Surface in LoginActivity
  • JavaScript Enabled in WebViews Without JavaScript Interfaces
  • Google Maps API Key in Manifest (Client-Side Intended)

Top privacy issues

  • Pre-Consent Analytics and Marketing SDK Initialization
  • PII Collection in Analytics Events
  • BlueConic Extensive User Profiling

Full analysis

Odido

Version: 9.4.1 | Analyzed: 2026-03-05 | Platform: Android

What This Means for You

App usage and behavior is tracked by analytics and marketing platforms, including BlueConic, which builds a profile of users across sessions. Data is handled securely in transit and at rest. Users have moderate control over their data, but some marketing data collection runs in the background without a clear opt-out.

Recommendation: Trustworthy

Best For: Odido customers managing their account and plan

Key Findings

Data Security - 5 findings (5 info)

Network Security - 1 finding (1 info)

Code Safety - 0 findings

Privacy - 4 findings (1 high, 3 medium)

Privacy Concerns

What Data is Collected

The app collects behavioral and usage data through multiple analytics platforms. Firebase Analytics and BlueConic track in-app activity over time, building a behavioral profile linked to the user's account. Selligent Marketing Cloud gathers data used for personalized marketing communications.

Third-Party Data Sharing

Data is shared with the following third-party services:

  • Firebase Analytics - Tracks user usage patterns within the app
  • Firebase Crashlytics - Collects error and stability reports from the device
  • Firebase Messaging - Delivers push notifications to the device
  • Firebase Remote Config - Controls which features and content are shown
  • Firebase Performance - Monitors how the app performs on the device
  • Selligent Marketing Cloud - Manages targeted marketing communications
  • BlueConic - Builds a behavioral profile of users across sessions
  • Google Maps - Powers location and mapping features
  • Google Ads SDK - Enables ad targeting based on user behavior
  • ML Kit Vision - Processes images locally on the device

Understanding the Scores

Category Score
Security 97/100
Privacy 75/100
Data Security 100/100
Network Security 100/100
Code Safety 97/100
Data Collection 72/100
Data Sharing 100/100
User Control 78/100

Positive Security Features

  • Account data and communications are protected with strong security measures during transmission and storage
  • All network requests are sent through secure connections
  • The app's core code follows safe programming practices, keeping data protected against common software errors

Areas for Improvement

  • Background marketing tracking: BlueConic and Selligent Marketing Cloud collect data about user in-app behavior in the background, with no clear in-app option to opt out of this profiling.
  • Advertising data use: The Google Ads SDK uses behavioral data to build an advertising profile, which may influence ads shown to users outside of this app.
  • Data collection clarity: The full extent of what is collected and shared with third-party marketing partners is not clearly communicated within the app itself.

About This Analysis

This scorecard is based on automated code analysis of the app as published. It reflects what the app is built to do, based on the code present at the time of analysis. Actual data practices may vary and are subject to the developer's privacy policy.

App Details

  • App Name: Odido
  • Package ID: nl.oberon.tmobile.my
  • Version: 9.4.1 (build 1068389)
  • Platform: Android
  • Scan Date: 2026-03-05

Versions & scan history

ScanDateOverall score
#1 (current) 86/100