CITT

    Scan results

    GPSEC

    Android

    GPSEC is a GPS fleet tracking application that provides real-time vehicle location monitoring, route optimization, and emergency alert functionality for fleet management operations.

    CITT SCORE
    60
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Users who need GPS tracking features

    What It Means For You

    Location data is a core part of how this app works, and it uses Google and OpenStreetMap services to process it. Push notifications are handled through Firebase, which means device activity reaches Google's infrastructure. User data is handled with moderate care, though there are some gaps in how it is protected at rest.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (19)

    Data Security

    5 total
    1 Critical
    1 High
    2 Medium
    1 Info

    Network Security

    5 total
    1 High
    1 Medium
    2 Low
    1 Info

    Code Security

    4 total
    1 Medium
    2 Low
    1 Info

    Privacy

    4 total
    1 Medium
    3 Low

    Third-Party Risk

    1 total
    1 Info

    Third-Party Services

    Firebase Core, Firebase Cloud Messaging (FCM), Google Maps SDK, awesome_notifications, flutter_secure_storage, Google Tink, OpenStreetMap / OSRM Routing, Nominatim Geocoding, OkHttp3, osmdroid

    Security Strengths

    • ✓No advertising or commercial analytics SDKs present — minimal third-party tracking footprint
    • ✓Android KeyStore used correctly via Google Tink for flutter_secure_storage key material
    • ✓OkHttp does not bypass SSL certificate validation — no custom trust-all TrustManager
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    location
    fleet tracking
    sensitive data
    gps
    b2b

    Package

    com.gpsec.usuario

    Version

    3.26.35 (versionCode 131)

    Analysis Date

    Mar 31, 2026

    Classes Analyzed

    7,941

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 5 findings (1 critical, 1 high, 2 medium, 1 info)

    Network Security - 5 findings (1 high, 1 medium, 2 low, 1 info)

    Code Safety - 0 findings

    Privacy - 4 findings (1 medium, 3 low)

    Privacy Concerns

    What Data is Collected

    Precise location is collected continuously as part of the app's core function. Device identifiers and notification-related data are also gathered through push notification services.

    Third-Party Data Sharing

    Location and device activity passes through Google's infrastructure via Firebase Cloud Messaging and Google Maps. OpenStreetMap and its routing and geocoding services also process user location to provide mapping features.

    Understanding the Scores

    CategoryScore
    Security55/100
    Privacy72/100
    Data Security55/100
    Network Security57/100
    Code Safety84/100
    Data Collection91/100
    Data Sharing90/100
    User Control86/100

    Positive Security Features

    • No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • Some data stored on the device is not fully protected against access by other apps or unauthorized parties.
    • Parts of the app's network communication lack the protections needed to keep user data safe while it travels between the device and remote servers.
    • More clarity around how long location history is retained and when it is removed would give users better control over their personal information.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and behavior. Scores reflect the app's security and privacy practices at the time of the scan.

    App Details

    • App: GPSEC
    • Package: com.gpsec.usuario
    • Version: 3.26.35 (build 131)
    • Scan Date: 2026-03-31

    Right of Reply

    Developer not yet contacted