APCOA Connect – Parking Security & Privacy Scorecard
Android
Payment activity goes through Judo Payments, and location is processed via Google Maps and Google Pay. Some data is stored with moderate protections, so avoiding saving sensitive information beyond what the app requires is a reasonable precaution.
Best for
Drivers who pay for parking on the go
Findings
- 0 critical
- 3 high
- 4 medium
- 2 low
- 6 info
1 issue identified across security and privacy analysis.
Top security issues
- Unencrypted AsyncStorage Database Storing Sensitive Data
- Google Sign-In Tokens Stored in Unencrypted SharedPreferences
- Insecure Backup Configuration Enabled
Top privacy issues
- Multiple Unencrypted SharedPreferences Files
- Insecure Backup Configuration Enabled
- Unencrypted AsyncStorage Database Storing Sensitive Data
Full analysis
APCOA Connect - Parking
What This Means for You
Payment activity goes through Judo Payments, and location is processed via Google Maps and Google Pay. Some data is stored with moderate protections, so avoiding saving sensitive information beyond what the app requires is a reasonable precaution.
Recommendation: Acceptable
Best For: Drivers who pay for parking on the go
Key Findings
Data Security - 6 findings (3 high, 2 medium, 1 info)
Network Security - 0 findings
Code Safety - 0 findings
Privacy - 1 finding (1 medium)
Privacy Concerns
What Data is Collected
APCOA Connect collects user location, payment details, and in-app activity. Device identifiers are also gathered as part of normal app operation.
Third-Party Data Sharing
User data is shared with the following third-party services:
- Judo Payments - Processes parking payments
- Google Maps - Powers location and mapping features
- Google Pay - Handles payment transactions
- ML Kit Barcode - Reads barcodes scanned within the app
- Expo SDK / React Native - Core framework underpinning the app
Understanding the Scores
| Category | Score |
|---|---|
| Security | 68/100 |
| Privacy | 72/100 |
| Data Security | 58/100 |
| Network Security | 100/100 |
| Code Safety | 88/100 |
| Data Collection | 65/100 |
| Data Sharing | 78/100 |
| User Control | 100/100 |
Positive Security Features
- All data transmitted between the app and remote services is sent over secure connections.
- Users have full control over their data and privacy choices within the app.
- The app's code is well-constructed with few safety concerns.
Areas for Improvement
- How payment and account data is stored on the device could be better protected against local access.
- The app collects a broader range of information than a parking service strictly requires, which increases the amount of user data at risk.
- Data storage practices could be tightened to give personal details stronger at-rest protection.
About This Analysis
This scorecard is produced through automated static analysis of the app's code and configuration. Scores reflect the security and privacy practices observed at the time of the scan.
App Details
- App: APCOA Connect - Parking
- Package: com.apcoaconnect
- Version: 9.2.0 (90200)
- Scan Date: 2026-03-04
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 70/100 |