Booking.com Hotel Reservations (Android / Google Play) on Jul 21, 2016
Our examination revealed total 45 items, where were 21 DAR items and 24 DIT items. Among DAR items 0 best items found and among DIT items 0 best items found. Also 0 worst items found and 3 worst items found.
This application is available for Android here. This app was designed for instant confirmation, paperless check-in and offline maps, to let every time you book accommodation get access to any out of 800,000+ properties you desire. The latest build was released on July 12, 2016.
Let's cite the description of this application below: ------------------------------------------- The best thing about the Booking.com app? Instant confirmation, paperless check-in and offline maps, every time you book an accommodation. Search for a place to stay - With 800,000+ properties – we’re everywhere you travel - Want to stay in an apartment, budget accommodation, b&b or rent a villa? We’ve got those too! - Looking for a last-minute hotel reservation? Book most without a credit card! - Search by city, landmark, hotel name or properties close by in one tap - Filter by WiFi, price, review score and other things important to you Get great hotel deals - Browse 52 million verified guest reviews to help you pick your perfect stay - Location location location! View maps to make sure your hotel is where you want to be - Save your favorite properties to a list and share with friends and family - Find great deals at all kinds of amazing properties (not just cheap hotels!) Book it! - Sign into your account and we’ll auto-fill your details for faster booking Make changes, anytime - Get paperless confirmation and offline maps with the app! No printer, data or wifi needed - Add hotel bookings to your calendar for multi-leg trips - Make changes to your bookings online with the app - Access 24/7 customer service by phone or email, available in English and up to 40 other languages. -------------------------------------------
Protection levels.
Locally stored data (Data-at-Rest, DAR). Locally stored data groups include Analytics 'n' Ads Information, Account Information, Credentials Information, Location 'n' Maps Information, Social Information, Travel Information, Media Information, Booking 'n' Purchases Information. The average DAR value is 3.50 points (7.00 points of system protection and 0.00 points of own protection). It equals to a typical value (3.5 points, where's 7 points of system protection and 0 points of own protection).
Items with average value 3.50 points (7 points of system protection, 0 points of own protection) means data protection levels have following definitions. Frankly talking, extra data found that shouldn't be accessed where system protection case - root/jailbreak is required but not possible without wiping device data, and own protection case - stored as is. - Device Details ('Analytics 'n' Ads Information' Group) - Includes basic device details plus hardware key and fingerprints as well as IMEI. This data item related to mentioned group meant to be any kind of info related to analytics services like flurry, google analytics, etc. or advertisements, - Account Details ('Account Information' Group) - Full info about your account incl. account membership, expiration, profile, linked data and account, etc. This data item related to mentioned group meant to be any info related to profiles, basic credential ids like email or username or phone number plus some more info depends on applications, - Credentials (Tokens) ('Credentials Information' Group) - Different tokens used to get an access to your account except passwords but incl. app or 3rd party tokens, secret keys and etc. (usually give a full access to your account). This data item related to mentioned group meant to be any types of credentials incl. basic (ids only), passwords, tokens, etc., - Media Data ('Location 'n' Maps Information' Group) - Any kind of info like images, audios, videos, media notes, etc. This data item related to mentioned group meant to be any type of GEO data from trackers, social networks, GPS, etc., - GEO Data ('Location 'n' Maps Information' Group) - Any kind of GEO info stored as plain text referred to the places or tracked activity. This data item related to mentioned group meant to be any type of GEO data from trackers, social networks, GPS, etc., - Address Data ('Location 'n' Maps Information' Group) - Home, work or another type of owner address stored by apps. This data item related to mentioned group meant to be any type of GEO data from trackers, social networks, GPS, etc., - Credentials (IDs) ('Credentials Information' Group) - Only account IDs like app or 3rd party user IDs incl. emails, phone number, usernames and etc. (depends on apps). This data item related to mentioned group meant to be any types of credentials incl. basic (ids only), passwords, tokens, etc., - Address Data ('Account Information' Group) - Home, work or another type of owner address stored by apps. This data item related to mentioned group meant to be any info related to profiles, basic credential ids like email or username or phone number plus some more info depends on applications, - Credentials (IDs) ('Social Information' Group) - Only account IDs like app or 3rd party user IDs incl. emails, phone number, usernames and etc. (depends on apps). This data item related to mentioned group meant to be info grabbed from 3rd party social networks, - Account Data ('Social Information' Group) - Basic info about account like name, list of sub-account (e.g. financial or other) and some linked data like a phone number. This data item related to mentioned group meant to be info grabbed from 3rd party social networks, - Tracked Data 'n' Favourites ('Travel Information' Group) - Any kind of favourites data or tracked data marked as desirable by users and for users (Like is that user is on fb messenger, viber, bank client or favourite hotel, room type, flight route, airline). This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Personalization ('Media Information' Group) - Info describes user preferences, favourites, tracked data, search requests, suggestions, etc. This data item related to mentioned group meant to be lot of data like photo, image, video, audio, - Personalization ('Travel Information' Group) - Info describes user preferences, favourites, tracked data, search requests, suggestions, etc. This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Address Data ('Travel Information' Group) - Home, work or another type of owner address stored by apps. This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - GEO Data ('Travel Information' Group) - Any kind of GEO info stored as plain text referred to the places or tracked activity. This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Travel Details ('Travel Information' Group) - Full info about accommodation (hotel, address, contacts, room,date and time, facilities, media data), flights (routes, location, date and time, media data) or ground (routes, location, date and time, media data). This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Media Data ('Travel Information' Group) - Any kind of info like images, audios, videos, media notes, etc. This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Media URLs ('Travel Information' Group) - URLs related to media info such as stream media or profile's media, etc. This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Orders & Reservation Details ('Booking 'n' Purchases Information' Group) - Full info about orders, reservations, like ID, date and time, amount of payment, flight routes, hotel or another order details, rules, linked data. This data item related to mentioned group meant to be not assigned yet, - Orders & Reservation History ('Booking 'n' Purchases Information' Group) - Basic info about orders, reservations, like ID, date and time, amount of payment, and place (depends on apps). This data item related to mentioned group meant to be not assigned yet
Keep in mind if you're using some Android devices such Samsung or LG that allow to root your device without user action, the system level equals 0 points instead of 7. It means your data can be stolen without involving your actions.
Transferred data (Data-in-Transit, DIT). Transferred data groups include Device Information, Application Information, Location 'n' Maps Information, Travel Information, Social Information, Booking 'n' Purchases Information, Personal 'n' Private Information, Media Information, Account Information, Payment 'n' Transaction Information, Financial Information. The average DIT value is 3.67 points (4.00 points of system protection and 3.33 points of own protection). It is less than a typical value (4 points, where's 4 points of system protection and 4 points of own protection).
Items #1 with average value 4.00 points (4 points of system protection, 4 points of own protection) means data protection levels have following definitions. Frankly talking, data available if it's allowed only and may require user action where system protection case - informs if fake certificate imported into a device, and own protection case - bypassed by fake/stolen root certificates (doesn't check certificate path). - Device Data ('Device Information' Group) - Owner Device ID, Owner Device Name, Owner Device OS Name and Version. This data item related to mentioned group meant to be details about your device, - Application Configs ('Application Information' Group) - Different configuration files created by your app, perhaps app permissions. This data item related to mentioned group meant to be any kind of info related to app, app settings, incl. installed apps or installers, - GEO Data ('Location 'n' Maps Information' Group) - Any kind of GEO info stored as plain text referred to the places or tracked activity. This data item related to mentioned group meant to be any type of GEO data from trackers, social networks, GPS, etc., - Address Data ('Location 'n' Maps Information' Group) - Home, work or another type of owner address stored by apps. This data item related to mentioned group meant to be any type of GEO data from trackers, social networks, GPS, etc., - Environment ('Device Information' Group) - Different info about environment of you device incl. apps lists, device info, OS name and versions, updates, list of users, network details, etc. This data item related to mentioned group meant to be details about your device, - Tracked Data 'n' Favourites ('Travel Information' Group) - Any kind of favourites data or tracked data marked as desirable by users and for users (Like is that user is on fb messenger, viber, bank client or favourite hotel, room type, flight route, airline). This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Credentials (IDs) ('Social Information' Group) - Only account IDs like app or 3rd party user IDs incl. emails, phone number, usernames and etc. (depends on apps). This data item related to mentioned group meant to be info grabbed from 3rd party social networks, - Credentials (Passwords) ('Social Information' Group) - Well known passwords or PINs you're using to get an access to your account (usually worse than tokens because gives a full access to your account). This data item related to mentioned group meant to be info grabbed from 3rd party social networks, - Credentials (Tokens) ('Social Information' Group) - Different tokens used to get an access to your account except passwords but incl. app or 3rd party tokens, secret keys and etc. (usually give a full access to your account). This data item related to mentioned group meant to be info grabbed from 3rd party social networks, - Media Data ('Social Information' Group) - Any kind of info like images, audios, videos, media notes, etc. This data item related to mentioned group meant to be info grabbed from 3rd party social networks, - Orders & Reservation History ('Booking 'n' Purchases Information' Group) - Basic info about orders, reservations, like ID, date and time, amount of payment, and place (depends on apps). This data item related to mentioned group meant to be not assigned yet, - Orders & Reservation Details ('Booking 'n' Purchases Information' Group) - Full info about orders, reservations, like ID, date and time, amount of payment, flight routes, hotel or another order details, rules, linked data. This data item related to mentioned group meant to be not assigned yet, - Personalization ('Personal 'n' Private Information' Group) - Info describes user preferences, favourites, tracked data, search requests, suggestions, etc. This data item related to mentioned group meant to be any kind of personal and private info not grabbed from the 3rd party social networks or your ids, - Travel Details ('Travel Information' Group) - Full info about accommodation (hotel, address, contacts, room,date and time, facilities, media data), flights (routes, location, date and time, media data) or ground (routes, location, date and time, media data). This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - GEO Data ('Travel Information' Group) - Any kind of GEO info stored as plain text referred to the places or tracked activity. This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Address Data ('Travel Information' Group) - Home, work or another type of owner address stored by apps. This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Account Details ('Account Information' Group) - Full info about your account incl. account membership, expiration, profile, linked data and account, etc. This data item related to mentioned group meant to be any info related to profiles, basic credential ids like email or username or phone number plus some more info depends on applications, - Account Data ('Social Information' Group) - Basic info about account like name, list of sub-account (e.g. financial or other) and some linked data like a phone number. This data item related to mentioned group meant to be info grabbed from 3rd party social networks, - Card Full Information ('Payment 'n' Transaction Information' Group) - All details about card includes short info, holder address, bank info and CVC, CVV, CVV2. This data item related to mentioned group meant to be details about transactions and payment data involved into transaction records, - Card Short Information ('Financial Information' Group) - Some info about card holder, card number full or short) and expiration. This data item related to mentioned group meant to be any kind of info that describe payments capabilities
Items #2 with average value 2.00 points (4 points of system protection, 0 points of own protection) means data protection levels have following definitions. Frankly talking, developers & vendors mistakes, no user action required where system protection case - informs if fake certificate imported into a device, and own protection case - transferred as is, perhaps protection mode turn off or doesn't exist or info revealed anyway. - Media Data ('Travel Information' Group) - Any kind of info like images, audios, videos, media notes, etc. This data item related to mentioned group meant to be any kind of travel info like flight, accommodation, ground transportation, etc., - Personalization ('Media Information' Group) - Info describes user preferences, favourites, tracked data, search requests, suggestions, etc. This data item related to mentioned group meant to be lot of data like photo, image, video, audio, - Maps Data ('Location 'n' Maps Information' Group) - Map data loaded by internal (native) or third party map applications like Apple/Google Maps or another one. This data item related to mentioned group meant to be any type of GEO data from trackers, social networks, GPS, etc.
Keep in mind if you're using out-of-dated Android < 5.0, the system level equals 2 points instead of 4. It means your data can be stolen without involving your actions.
Below you find two infographics summarizing what we described above.
First pic includes info about data items combined into groups and best protected items found.
Second pic includes info about data items separately from group and worst protected items found
Privacy Policy Full application privacy policy is available here. You may find privacy policy details proceeding the link above to compare developer's vision on data protection with our results.