'%3e%3cpath%20d='M138%2095.6436V147H0V0H138V51.3564H59.3526V95.6436H138Z'%20fill='white'/%3e%3cpath%20d='M208%200V147H150V0H208Z'%20fill='white'/%3e%3cpath%20d='M361%200V51.4292H321.377V147H261.731V51.4292H220V0H361Z'%20fill='white'/%3e%3cpath%20d='M512%200V51.4292H472.939V147H414.139V51.4292H373V0H512Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_1_12'%3e%3crect%20width='512'%20height='147'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Scan results
Reisbalans
AndroidReisbalans enables users to register and claim commuting expenses and business journeys with automated trip registration and GPS tracking. Offers access to multiple transport modes including taxi, shared cars, public transport, and bike rental.
Quick Verdict
Best for: Commuters comfortable with travel data sharing
Not For: You prefer not sharing location data with third parties
What It Means For You
Travel movements and journey data are shared with multiple third-party services including analytics and mapping providers. Location activity is monitored by performance tracking tools that report back to outside companies. User data is stored with protections that have notable gaps, increasing the risk that sensitive travel records could be accessed without authorization.
Quick Verdict
Best for: Commuters comfortable with travel data sharing
Not For: You prefer not sharing location data with third parties
What It Means For You
Travel movements and journey data are shared with multiple third-party services including analytics and mapping providers. Location activity is monitored by performance tracking tools that report back to outside companies. User data is stored with protections that have notable gaps, increasing the risk that sensitive travel records could be accessed without authorization.
Method and Limitations
Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.
Findings (26)
Data Security
5 totalNetwork Security
5 totalCode Security
10 totalPrivacy
4 totalThird-Party Risk
2 totalThird-Party Services
Security Strengths
- ✓Android Auto Backup disabled
- ✓WebView SSL errors always rejected
- ✓WebView debugging disabled in release builds
- ✓Target SDK 35 enforces HTTPS by default
- ✓Room databases use parameterized queries
- ✓OAuth PKCE uses SecureRandom correctly
Version diff is on the Developer plan. See developer plans.
Context Tags
Package
com.reisbalansmobile
Version
2.58.0 (Build 1594224504)
Analysis Date
Jan 19, 2026
Classes Analyzed
21,921
Was this analysis helpful?
Feedback helps us improve our analysis
Recommendation: Use With Caution
Key Findings
Data Security - 5 findings (2 critical, 1 high, 1 medium, 1 low)
Network Security - 5 findings (1 critical, 1 high, 3 medium)
Code Safety - 0 findings
Privacy - 4 findings (1 critical, 2 high, 1 medium)
Privacy Concerns
What Data is Collected
Reisbalans collects location and movement data to support journey tracking and travel expense features. This includes routes, travel times, and commute patterns gathered throughout the day.
Third-Party Data Sharing
Travel data is shared with the following outside services:
- NewRelic APM - Application performance monitoring that observes how the app is used and sends usage patterns to an outside company
- Mobidot MoveSmarter - Travel behavior analytics that processes movement records
- Vecore - A data processing service that handles travel information
- TomTom - A mapping and routing provider that receives location data
- Firebase Messaging - Google's notification service
- Google Play Services - Core Google platform services
- Google Maps - A mapping provider that processes location data
Understanding the Scores
| Category | Score |
|---|---|
| Overall Security | 25/100 |
| Overall Privacy | 30/100 |
| Data Security | 20/100 |
| Network Security | 35/100 |
| Code Safety | 40/100 |
| Data Collection | 35/100 |
| Data Sharing | 40/100 |
| User Control | 25/100 |
Scores are on a 0-100 scale where 100 represents the strongest security and privacy posture.
Positive Security Features
- Standard Android platform security protections are present in the app
Areas for Improvement
- How location and travel history is protected during storage needs strengthening to reduce the chance that personal travel records could be accessed without authorization.
- Travel data flows to a large number of outside companies. Reducing the number of third-party recipients would give users better control over where movement information goes.
- Options for limiting data collection and sharing are restricted. Clearer, more accessible controls would let users make informed choices about their personal travel data.
About This Analysis
This scorecard is based on an automated technical review of the app's code and configuration. Results reflect the security and privacy practices observed at the time of the scan and may change with future app updates.
App Details
| Field | Value |
|---|---|
| App Name | Reisbalans |
| Package | com.reisbalansmobile |
| Version | 2.58.0 (Build 1594224504) |
| Platform | Android |
| Scan Date | January 19, 2026 |
| Analysis By | canITrustThat |
Right of Reply
Developer not yet contacted