# Security & Privacy Scorecard

## Xfinity Stream

**Version:** 8.13.0.2840 | **Platform:** Android | **Analyzed:** 2026-01-31

**Security Score:** 72/100 | **Privacy Score:** 65/100

## What This Means for You

Viewing habits, device activity, and usage patterns are tracked by multiple analytics and advertising companies including Adobe, Nielsen, Google, and Oracle BlueKai. The data is used to build ad profiles and measure audiences across platforms. Users have limited control over this data collection.

## Recommendation: Use With Caution

**Best For:** Xfinity subscribers comfortable with broad data sharing
**Avoid If:** You want to limit ad targeting and data profiling

## Key Findings

**Data Security** - 1 finding (1 medium)

**Network Security** - 4 findings (1 critical, 3 medium)

**Code Safety** - 0 findings

**Privacy** - 4 findings (1 critical, 1 high, 2 medium)

## Privacy Concerns

### What Data is Collected

The app collects viewing habits, device identifiers, usage patterns, and behavioral signals. This data is used to measure audiences, personalize content recommendations, and deliver targeted advertising.

### Third-Party Data Sharing

Data is shared with the following third-party services:

- Adobe Analytics
- Nielsen Digital Measurement
- Sift Science
- Firebase Analytics
- Google Analytics
- Firebase Crashlytics
- Firebase Cloud Messaging
- Firebase Remote Config
- Google Play Services Cast
- FreeWheel
- Oracle BlueKai

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 72/100 |
| Privacy | 65/100 |
| Data Security | 85/100 |
| Network Security | 68/100 |
| Code Safety | 80/100 |
| Data Collection | 60/100 |
| Data Sharing | 62/100 |
| User Control | 55/100 |

## Positive Security Features

- No standout positive security practices were identified in this version of the app.

## Areas for Improvement

- User data is shared with over ten advertising and analytics services, including behavioral profiling platforms such as Oracle BlueKai and FreeWheel, giving a wide range of companies access to viewing activity and device usage.
- User control over data collection and use is limited, reflected in a User Control score of 55/100, with no clear in-app options to opt out of audience measurement or advertising data use.
- Data sent between the app and remote services may travel with less protection than expected.

---

## About This Analysis

This scorecard is based on static analysis of the app binary and configuration at the version listed below. Scores reflect observed data practices, third-party integrations, and security configuration at the time of analysis.

### App Details

- **App Name:** Xfinity Stream
- **Package ID:** com.xfinity.cloudtvr
- **Version:** 8.13.0.2840
- **Scan Date:** 2026-01-31