# Security & Privacy Scorecard

## Alaska Airlines - Travel

**com.alaskaairlines.android** | Version 7.6.9 (Build 330) | Scanned: 2026-02-12

## What This Means for You

Booking activity, travel patterns, and in-app behavior are shared with analytics and marketing services including Adobe Analytics, Firebase, Tealium, and Quantum Metric. Identity verification data passes through Jumio when ID-based features are used. User data stored on the device, including payment and loyalty account details, may not be fully protected.

## Recommendation: Use With Caution

**Best For:** Alaska flyers comfortable with standard analytics

## Key Findings

**Data Security** - 5 findings (2 critical, 2 medium, 1 low)

**Network Security** - 4 findings (1 critical, 1 high, 2 medium)

**Code Safety** - 0 findings

**Privacy** - 2 findings (2 medium)

## Privacy Concerns

### What Data is Collected

Alaska Airlines collects travel booking details, loyalty account information, location data, device identifiers, and behavioral data about how users navigate and use the app, including searches, interactions with offers, and notification engagement.

### Third-Party Data Sharing

User data is shared with the following third-party services:

- **Adobe Analytics** - Behavioral analytics and marketing measurement
- **Firebase Analytics** - App usage tracking and crash reporting
- **Tealium** - Data management and audience segmentation
- **Quantum Metric** - Session replay and user experience analytics
- **Auth0** - Authentication services
- **Urban Airship** - Push notification delivery
- **Jumio** - Identity document verification
- **Optimizely** - A/B testing and feature experimentation

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 72/100 |
| Data Security | 35/100 |
| Network Security | 40/100 |
| Code Safety | 50/100 |
| Data Collection | 75/100 |
| Data Sharing | 78/100 |
| User Control | 70/100 |

## Positive Security Features

- None identified in this version.

## Areas for Improvement

- Sensitive data stored on the device, including payment and loyalty account details, may not be fully protected against access by other apps or by someone with physical access to the phone.
- Data sent between the app and its servers in certain situations travels with less protection than expected.
- With behavioral data flowing to multiple analytics providers, clearer in-app controls would give users more choice over what is collected and shared.

---

## About This Analysis

This scorecard is generated through automated static analysis of the app's code and configuration. Scores reflect practices observed at the time of the scan and may change as the app is updated.

### App Details

- **App Name:** Alaska Airlines - Travel
- **Package ID:** com.alaskaairlines.android
- **Version:** 7.6.9 (Build 330)
- **Scan Date:** 2026-02-12
- **Platform:** Android