# Security & Privacy Scorecard

## Etos

**Version:** 3.67.0 (Build 1040244)
**Scan Date:** 2026-03-04
**Security Score:** 78/100
**Privacy Score:** 58/100

## What This Means for You

User activity and contact details are shared with Salesforce for marketing purposes, enabling personalized promotions based on shopping behavior. Firebase tracks crashes and delivers push notifications, while payment data is handled by Adyen and Cash App Pay. Users have limited control over how their data is used once shared with these third parties.

## Recommendation: Use With Caution

**Best For:** Etos shoppers comfortable with marketing analytics

## Key Findings

**Data Security** - 4 findings (1 high, 2 medium, 1 low)

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 5 findings (3 high, 2 medium)

## Privacy Concerns

### What Data is Collected

The app collects contact information, shopping activity, browsing behavior, and device identifiers. This data supports the loyalty program, personalized offers, and app performance monitoring.

### Third-Party Data Sharing

User data is shared with the following services:

- **Salesforce Marketing Cloud** - receives contact and behavioral data for personalized marketing campaigns
- **Firebase (Crashlytics, Cloud Messaging)** - collects device and performance data, delivers push notifications
- **Adyen Payment Processing** - processes payment transactions
- **Cash App Pay** - processes payments made via Cash App
- **Google Maps** - provides location and mapping features
- **Mopinion** - collects in-app feedback and usage information
- **AppAuth** - manages authentication

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 78/100 |
| Privacy | 58/100 |
| Data Security | 70/100 |
| Network Security | 100/100 |
| Code Safety | 100/100 |
| Data Collection | 62/100 |
| Data Sharing | 68/100 |
| User Control | 55/100 |

## Positive Security Features

- Network connections are secured, protecting user data while it travels between the device and the app's servers.
- The app's code structure shows no safety concerns, reducing the risk of unexpected behavior.

## Areas for Improvement

- Contact and behavioral data is shared with marketing platforms, with limited options for users to restrict how it is used for advertising purposes.
- Data collection extends to behavioral profiling that goes beyond what is needed for core shopping features.
- User controls for managing data preferences are limited, leaving users with little ability to adjust how their information is handled once it is shared with third parties.

---

## About This Analysis

This scorecard reflects the security and privacy practices found in the app version listed below.

### App Details

- **App Name:** Etos
- **Package ID:** nl.etos.mijnetos
- **Version:** 3.67.0 (Build 1040244)
- **Scan Date:** 2026-03-04