CITT

    Scan results

    Schiphol

    Android

    Official Schiphol Amsterdam Airport app for real-time flight information, personalized journey itineraries, security timeslot booking, parking reservation, and interactive airport maps. Version 12.3.0. Rated 4.9★ by 38,800+ users.

    CITT SCORE
    80
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Travelers comfortable with standard analytics

    What It Means For You

    Usage patterns and app behavior are shared with Firebase Analytics and Google for performance monitoring and crash reporting. The device receives personalized content via Firebase Remote Config. Auth0 handles login, meaning authentication data flows through a third-party service.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (9)

    Data Security

    3 total
    1 High
    1 Medium
    1 Info

    Code Security

    3 total
    1 Medium
    2 Low

    Privacy

    3 total
    1 Critical
    1 High
    1 Medium

    Third-Party Services

    Firebase Analytics, Firebase Crashlytics, Firebase Remote Config, Firebase Cloud Messaging, Firebase Performance Monitoring, Auth0, Mapbox Maps, Usabilla, Google ML Kit

    Security Strengths

    • ✓All HTTPS communication with proper TLS validation
    • ✓Android backups disabled (prevents credential leakage)
    • ✓SQL injection protected (Room ORM with parameterized queries)
    • ✓No session recording SDKs detected
    • ✓User-controllable analytics toggle exists in settings
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    travel
    location
    sensitive data
    authentication
    analytics
    ads

    Package

    org.schiphol

    Version

    12.3.0

    Analysis Date

    Mar 4, 2026

    Classes Analyzed

    18,850

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Acceptable

    Key Findings

    Data Security - 4 findings (1 high, 1 medium, 2 info)

    Network Security - 0 findings

    Code Safety - 0 findings

    Privacy - 3 findings (1 critical, 1 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    The app collects behavioral and usage data through multiple analytics services. Firebase Analytics builds a record of how users interact with the app. Firebase Crashlytics and Firebase Performance Monitoring gather device and session data when the app encounters issues or slowdowns. Mapbox Maps processes location data to render maps. Usabilla may collect in-app feedback responses and interaction patterns.

    Third-Party Data Sharing

    Data flows to the following third-party services:

    • Firebase Analytics / Google - In-app behavior and usage patterns
    • Firebase Crashlytics - Crash reports and device diagnostic data
    • Firebase Remote Config - Configuration data for personalized content delivery
    • Firebase Cloud Messaging - Data required to deliver push notifications
    • Firebase Performance Monitoring - Performance metrics tied to user sessions
    • Auth0 - Login and authentication data
    • Mapbox Maps - Location and map interaction data
    • Usabilla - In-app feedback and survey responses
    • Google ML Kit - Processed data for on-device features

    Understanding the Scores

    CategoryScore
    Security91/100
    Privacy70/100
    Data Security82/100
    Network Security100/100
    Code Safety92/100
    Data Collection72/100
    Data Sharing78/100
    User Control85/100

    Positive Security Features

    • All network communications use secure protocols, achieving a perfect network security score
    • The app's code passes all safety checks, reflecting careful development practices

    Areas for Improvement

    • Reduce the number of analytics and tracking services so user data is shared with fewer third parties
    • Review data collection practices to align more closely with what the app's features actually require
    • Provide clearer in-app controls so users can limit which data is shared with analytics and advertising partners

    About This Analysis

    Scores reflect the state of the app at the time of analysis and may change as the app is updated.

    App Details

    • App Name: Schiphol Amsterdam Airport
    • Package ID: org.schiphol
    • Version: 12.3.0
    • Scan Date: March 4, 2026

    Right of Reply

    Developer not yet contacted