# Security & Privacy Scorecard

## Netflix

**Version:** 9.42.0 build 8 63616  
**Platform:** Android  
**Scan Date:** December 19, 2025  

## What This Means for You

App activity and device data is shared with crash-reporting and messaging services. Network protections have notable gaps, which may leave user account activity with less protection than expected under certain conditions. Viewing habits and usage patterns are collected to support the service.

## Recommendation: Use With Caution

**Best For:** Everyday streaming with standard crash reporting

## Key Findings

**Data Security** - 3 findings (1 critical, 2 high)

**Network Security** - 6 findings (3 critical, 1 high, 1 medium, 1 low)

**Code Safety** - 0 findings

**Privacy** - 9 findings (2 high, 5 medium, 2 low)

## Privacy Concerns

### What Data is Collected

Netflix collects viewing habits, device information, app activity, and usage patterns. This includes what content is watched, how long it is watched, and how users interact with the app across sessions.

### Third-Party Data Sharing

User data is shared with the following third-party services:

- **Bugsnag** - Crash reporting and error tracking
- **Firebase Cloud Messaging** - Push notification delivery
- **Apollo GraphQL** - Data querying and communication layer
- **OkHttp3** - Network request handling
- **AndroidX Jetpack** - Core framework components
- **RxJava** - Asynchronous operations
- **Dagger/Hilt** - Internal dependency management
- **Widevine DRM** - Content protection for streamed media

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 52/100 |
| Privacy | 68/100 |
| Data Security | 55/100 |
| Network Security | 40/100 |
| Code Safety | 62/100 |
| Data Collection | 70/100 |
| Data Sharing | 85/100 |
| User Control | 65/100 |

## Positive Security Features

- Content protection for streamed media is handled through an established digital rights management system, helping safeguard streamed content.
- Push notifications are delivered through a well-maintained third-party messaging service with a consistent update cadence.

## Areas for Improvement

- Network communication protections should be strengthened to better protect user account activity and content accessed while streaming.
- The range of data shared with crash-reporting and analytics services could be narrowed to reduce how much user activity is visible to outside parties.
- Options for controlling and limiting behavioral data collection could be made more accessible within the app settings.

---

## About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect security and privacy practices observed at the time of the scan and may not capture all risks or changes introduced in subsequent updates.

### App Details

| Field | Value |
|---|---|
| Package ID | com.netflix.mediaclient |
| Version | 9.42.0 build 8 63616 |
| Platform | Android |
| Scan Date | December 19, 2025 |