# Security & Privacy Scorecard

## Easy Banking App

**com.bnpp.easybanking** | Version 40.55.8 | Scanned 2026-02-01

## What This Means for You

In-app behavior is shared with marketing and customer experience analytics services, including Adobe Marketing Cloud and Medallia, which track how users navigate and interact with the app. Crash and performance data is collected by Firebase. Actual banking transactions stay with the bank, but usage patterns are monitored by third-party analytics providers.

## Recommendation: Trustworthy

**Best For:** BNP Paribas customers doing everyday banking

## Key Findings

**Data Security** - 2 findings (1 medium, 1 low)

**Network Security** - 1 finding (1 medium)

**Code Safety** - 0 findings

**Privacy** - 3 findings (1 high, 1 medium, 1 low)

## Privacy Concerns

### What Data is Collected

The app collects data about how users navigate and use it, including which screens are visited, which features are used, and how users move through the app. Crash reports and performance diagnostics are also collected when errors occur.

### Third-Party Data Sharing

In-app behavior is shared with Adobe Marketing Cloud for marketing analytics and with Medallia for customer experience measurement. Crash and performance data is sent to Firebase (Google). Payment-related interactions involve Bancontact Payconiq for compatible transactions.

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 82/100 |
| Privacy | 72/100 |
| Data Security | 85/100 |
| Network Security | 92/100 |
| Code Safety | 85/100 |
| Data Collection | 75/100 |
| Data Sharing | 78/100 |
| User Control | 88/100 |

## Positive Security Features

- Enterprise-grade access management through IBM ISAM helps protect user accounts from unauthorised access.
- Gemalto/Thales Digital Security technology is used to strengthen sensitive operations within the app.
- Network communications are secured to a high standard, reflected in the 92/100 Network Security score.

## Areas for Improvement

- How user usage data is shared with third-party marketing and analytics services could be made clearer, with better in-app controls for opting out.
- Some on-device data storage practices could be strengthened to better protect information saved locally on the device.
- More transparent disclosure about which third parties receive user behavioral data, and for what purpose, would give users greater control over their information.

---

## About This Analysis

This scorecard is based on automated analysis of the app's code and configuration. Scores reflect the security and privacy practices observed in this version of the app.

### App Details

| Field | Value |
|---|---|
| App Name | Easy Banking App |
| Package ID | com.bnpp.easybanking |
| Version | 40.55.8 |
| Scan Date | 2026-02-01 |