# Security & Privacy Scorecard

## Mullvad VPN

**Version:** 2026.2 | **Analyzed:** 2026-03-21 | **Platform:** Android

**Security Score: 97/100** | **Privacy Score: 100/100**

## What This Means for You

The connection is routed through Mullvad's servers with no analytics or advertising SDKs collecting usage data. Google Play handles subscription billing, which means Google processes payment information. No third-party trackers or marketing services receive user activity.

## Recommendation: Very Secure

**Best For:** Anyone who wants strong, no-nonsense VPN protection

## Key Findings

**Data Security** - 0 findings

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 0 findings

## Privacy Concerns

### What Data is Collected

Mullvad VPN collects only what is necessary to operate the connection. No analytics services, behavioral trackers, or advertising platforms are embedded in the app. Browsing activity and VPN usage remain private.

### Third-Party Data Sharing

Google receives data through two integrations: Google Play Billing processes subscription payments, and Google Play Services provides core Android framework functions. No marketing companies, data brokers, or advertising networks receive information about user app usage or browsing behavior.

## Understanding the Scores

| Score Category | Value |
|----------------|-------|
| Security | 97/100 |
| Privacy | 100/100 |
| Data Security | 100/100 |
| Network Security | 100/100 |
| Code Safety | 97/100 |
| Data Collection | 100/100 |
| Data Sharing | 100/100 |
| User Control | 100/100 |

## Positive Security Features

- No advertising or analytics SDKs present in the app
- No behavioral profiling or user tracking of any kind
- Complete user control over account and connection data
- Third-party data sharing limited exclusively to payment processing via Google Play

## Areas for Improvement

- A small number of code safety findings point to implementation areas that could be further hardened in a future update.
- Subscription billing is handled by Google Play, meaning Google processes payment details under Google's privacy policy rather than Mullvad's.
- Users who want complete independence from Google services should note that Google Play Services integration is present as part of standard Android distribution.

---

## About This Analysis

This scorecard is generated through automated static analysis of the app's code and configuration. Scores reflect the app's security architecture and data handling practices at the time of analysis.

### App Details

| Field | Value |
|-------|-------|
| App | Mullvad VPN |
| Package | net.mullvad.mullvadvpn |
| Version | 2026.2 |
| Analyzed | 2026-03-21 |
| Platform | Android |