# Security & Privacy Scorecard

## com.nest.android

**Version:** 5.86.0.4 | **Scan Date:** 2026-03-27

## What This Means for You

Usage patterns and activity are tracked by Google Analytics and Firebase, which share data with Google's advertising infrastructure. Users have limited control over what is collected, and data flows through multiple third-party services. Network communication is well protected, so device data is sent with full protection.

## Recommendation: Use With Caution

**Best For:** Homeowners managing Nest devices daily
**Avoid If:** You prefer minimal analytics tracking

## Key Findings

**Data Security** - 2 findings (1 medium, 1 low)

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 4 findings (3 high, 1 medium)

## Privacy Concerns

### What Data is Collected

The app continuously collects behavioral data, device identifiers, usage patterns, performance metrics, and crash reports during normal operation. This information is gathered across sessions and tied to the device.

### Third-Party Data Sharing

Data flows to multiple Google-owned services: Firebase Analytics, Firebase Crashlytics, Firebase Performance, Firebase Remote Config, Firebase Cloud Messaging, Google Analytics, Google Play Services, and Google Maps. Additional libraries including AppAuth, OkHttp, gRPC, Glide, and Android Volley are also integrated, each representing a separate data channel active while the app is in use.

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 90/100 |
| Privacy | 58/100 |
| Data Security | 92/100 |
| Network Security | 100/100 |
| Code Safety | 92/100 |
| Data Collection | 60/100 |
| Data Sharing | 100/100 |
| User Control | 65/100 |

## Positive Security Features

- All network communication uses strong, modern protection, so data sent between the app and servers travels with full protection.
- Local data handling practices are solid, with no detected issues with how sensitive information is stored on the device.
- The app code does not contain patterns associated with unsafe execution or easily bypassed protections.

## Areas for Improvement

- Behavioral and usage data is shared with Google's advertising infrastructure, and there are limited in-app options to reduce the scope of what gets collected.
- Multiple analytics and tracking services run simultaneously, meaning user activity is observed by several independent third-party systems during ordinary use.
- User control over what data is gathered is restricted: the app does not provide granular opt-out settings for non-essential tracking.

---

## About This Analysis

This scorecard is based on automated static analysis of the app binary. Scores reflect observed behaviors and practices at the time of the scan. Results represent a point-in-time assessment and may not reflect changes introduced in subsequent app updates.

### App Details

- **Package:** com.nest.android
- **Version:** 5.86.0.4
- **Scan Date:** 2026-03-27
- **Platform:** Android