Qmusic NL Security & Privacy Scorecard

Android

96
Overall trust score
Very Secure
94
Security
97
Privacy

Listening activity and app usage are shared with Firebase, Google, and Facebook for analytics and advertising, plus Adjust for attribution tracking. Google Mobile Ads uses this data to serve targeted ads within the app. DPG Media also collects user profile and consent data through their own identity and privacy services.

Best for

Dutch radio listeners comfortable with standard analytics

Findings

  • 0 critical
  • 0 high
  • 4 medium
  • 5 low
  • 4 info

1 issue identified across security and privacy analysis.

Top security issues

  • JavaScript Interface in HybridView
  • Deep Link Handling Without Input Validation
  • Room Database Without Encryption

Top privacy issues

  • AdMob Pre-Consent Initialization
  • DPG Media Analytics API Key Hardcoded
  • Third-Party SDKs Use Plain SharedPreferences

Full analysis

Qmusic NL

nl.qmusic.app | Version 9.14.0 | Scanned 2026-03-05

What This Means for You

Listening activity and app usage are shared with Firebase, Google, and Facebook for analytics and advertising, plus Adjust for attribution tracking. Google Mobile Ads uses this data to serve targeted ads within the app. DPG Media also collects user profile and consent data through their own identity and privacy services.

Recommendation: Trustworthy

Best For: Dutch radio listeners comfortable with standard analytics

Key Findings

Data Security - 2 findings (1 medium, 1 low)

Network Security - 2 findings (1 low, 1 info)

Code Safety - 0 findings

Privacy - 2 findings (1 medium, 1 info)

Privacy Concerns

What Data is Collected

Qmusic NL collects listening history, app usage patterns, and device identifiers. DPG Media's identity and profile services capture account information and consent preferences.

Third-Party Data Sharing

User data is shared with the following third parties:

  • Firebase (Google) - app analytics, crash reporting, performance monitoring, and push notifications
  • Google Mobile Ads - targeted advertising based on usage data
  • Google Tag Manager - tag and event management for analytics
  • Facebook SDK - behavioral analytics and advertising attribution
  • Adjust SDK - campaign attribution and install tracking
  • Gemius SDK - audience measurement
  • DPG Media - user profile management, consent handling, and identity services

Understanding the Scores

Category Score
Security 94/100
Privacy 97/100
Data Security 97/100
Network Security 99/100
Code Safety 95/100
Data Collection 98/100
Data Sharing 100/100
User Control 97/100

Positive Security Features

  • The app uses established, well-known third-party services rather than obscure data brokers or unvetted analytics providers.
  • DPG Media's Privacy Gate integration provides a structured consent management layer, giving users a defined way to manage privacy preferences.
  • Data sharing is contained to a known set of advertising and analytics partners with clear, disclosed purposes.

Areas for Improvement

  • Data storage on the device could be more tightly controlled to reduce how long cached content remains accessible to other processes.
  • Analytics data collection shares some behavioral data with advertising partners, and more granular opt-out controls presented within the app would give users greater choice over what is shared.
  • A small number of network configuration choices have room to align more closely with current best practices, though the overall network security posture remains strong.

About This Analysis

Scores reflect static analysis of the app's code, configuration, and third-party integrations as of the scan date. They do not account for server-side behavior.

App Details

Field Value
Package ID nl.qmusic.app
Version 9.14.0 (21792)
Platform Android
Scan Date 2026-03-05

Versions & scan history

ScanDateOverall score
#1 (current) 96/100