Qmusic NL Security & Privacy Scorecard
Android
Listening activity and app usage are shared with Firebase, Google, and Facebook for analytics and advertising, plus Adjust for attribution tracking. Google Mobile Ads uses this data to serve targeted ads within the app. DPG Media also collects user profile and consent data through their own identity and privacy services.
Best for
Dutch radio listeners comfortable with standard analytics
Findings
- 0 critical
- 0 high
- 4 medium
- 5 low
- 4 info
1 issue identified across security and privacy analysis.
Top security issues
- JavaScript Interface in HybridView
- Deep Link Handling Without Input Validation
- Room Database Without Encryption
Top privacy issues
- AdMob Pre-Consent Initialization
- DPG Media Analytics API Key Hardcoded
- Third-Party SDKs Use Plain SharedPreferences
Full analysis
Qmusic NL
nl.qmusic.app | Version 9.14.0 | Scanned 2026-03-05
What This Means for You
Listening activity and app usage are shared with Firebase, Google, and Facebook for analytics and advertising, plus Adjust for attribution tracking. Google Mobile Ads uses this data to serve targeted ads within the app. DPG Media also collects user profile and consent data through their own identity and privacy services.
Recommendation: Trustworthy
Best For: Dutch radio listeners comfortable with standard analytics
Key Findings
Data Security - 2 findings (1 medium, 1 low)
Network Security - 2 findings (1 low, 1 info)
Code Safety - 0 findings
Privacy - 2 findings (1 medium, 1 info)
Privacy Concerns
What Data is Collected
Qmusic NL collects listening history, app usage patterns, and device identifiers. DPG Media's identity and profile services capture account information and consent preferences.
Third-Party Data Sharing
User data is shared with the following third parties:
- Firebase (Google) - app analytics, crash reporting, performance monitoring, and push notifications
- Google Mobile Ads - targeted advertising based on usage data
- Google Tag Manager - tag and event management for analytics
- Facebook SDK - behavioral analytics and advertising attribution
- Adjust SDK - campaign attribution and install tracking
- Gemius SDK - audience measurement
- DPG Media - user profile management, consent handling, and identity services
Understanding the Scores
| Category | Score |
|---|---|
| Security | 94/100 |
| Privacy | 97/100 |
| Data Security | 97/100 |
| Network Security | 99/100 |
| Code Safety | 95/100 |
| Data Collection | 98/100 |
| Data Sharing | 100/100 |
| User Control | 97/100 |
Positive Security Features
- The app uses established, well-known third-party services rather than obscure data brokers or unvetted analytics providers.
- DPG Media's Privacy Gate integration provides a structured consent management layer, giving users a defined way to manage privacy preferences.
- Data sharing is contained to a known set of advertising and analytics partners with clear, disclosed purposes.
Areas for Improvement
- Data storage on the device could be more tightly controlled to reduce how long cached content remains accessible to other processes.
- Analytics data collection shares some behavioral data with advertising partners, and more granular opt-out controls presented within the app would give users greater choice over what is shared.
- A small number of network configuration choices have room to align more closely with current best practices, though the overall network security posture remains strong.
About This Analysis
Scores reflect static analysis of the app's code, configuration, and third-party integrations as of the scan date. They do not account for server-side behavior.
App Details
| Field | Value |
|---|---|
| Package ID | nl.qmusic.app |
| Version | 9.14.0 (21792) |
| Platform | Android |
| Scan Date | 2026-03-05 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 96/100 |