TomTom - Maps & Traffic Security & Privacy Scorecard
Android
Usage patterns and in-app behavior are shared with analytics and attribution services including Adjust and Mixpanel. Location activity powers the navigation features but also passes through third-party crash and engagement platforms. Data sharing outside the app is limited, and users retain reasonable control over their experience.
Best for
Daily commuters comfortable with standard analytics
Findings
- 1 critical
- 3 high
- 6 medium
- 2 low
- 7 info
1 issue identified across security and privacy analysis.
Top security issues
- Insecure TrustManager in Eclipse Paho MQTT Library
- Unprotected ADB Backup Exposes Navigation Data
- Google Sign-In Tokens Stored in Plain SharedPreferences
Top privacy issues
- Pre-Consent Analytics SDK Initialization
- Third-Party SDK Data Stored Unencrypted
- Room Database Without Encryption
Full analysis
TomTom - Maps & Traffic
Overall Security Score: 70/100 | Privacy Score: 86/100
What This Means for You
Usage patterns and in-app behavior are shared with analytics and attribution services including Adjust and Mixpanel. Location activity powers the navigation features but also passes through third-party crash and engagement platforms. Data sharing outside the app is limited, and users retain reasonable control over their experience.
Recommendation: Acceptable
Best For: Daily commuters comfortable with standard analytics
Key Findings
Data Security - 8 findings (2 high, 1 medium, 5 info)
Network Security - 3 findings (1 critical, 2 info)
Code Safety - 0 findings
Privacy - 2 findings (1 high, 1 medium)
Privacy Concerns
What Data is Collected
The app collects precise location continuously to deliver navigation and real-time traffic features. Device identifiers, usage patterns, and behavioral signals are gathered through multiple analytics integrations. Crash and error data is sent to diagnostic services whenever the app encounters a problem.
Third-Party Data Sharing
The following third-party services receive data from use of the app:
- Adjust - Tracks installs and attributes user actions to advertising campaigns
- Mixpanel - Measures in-app behavior and engagement patterns
- Sentry - Receives crash reports and diagnostic information from the device
- Firebase - Handles analytics and push notification delivery
- UrbanAirship (Airship) - Powers push notification targeting and delivery
- Unity3D - Supports rendering or interactive map features
- Microsoft Cognitive Services Speech - Processes voice commands spoken to the app
- Google Play Services - Core Android platform integration
- Android Auto - Enables display and control through a vehicle's screen
- gRPC - Backend data communication framework
- Ktor - Networking framework used for server requests
Understanding the Scores
| Category | Score |
|---|---|
| Security | 70/100 |
| Privacy | 86/100 |
| Data Security | 82/100 |
| Network Security | 77/100 |
| Code Safety | 95/100 |
| Data Collection | 86/100 |
| Data Sharing | 100/100 |
| User Control | 91/100 |
Positive Security Features
- Code safety practices are strong, earning a 95/100 score with well-structured binary protections.
- Data sharing with outside parties is tightly scoped, achieving a perfect 100/100 data sharing score.
- Users retain meaningful control over their in-app experience, reflected in a 91/100 user control score.
- Data collection is proportionate to the navigation use case, with an 86/100 data collection score.
Areas for Improvement
- How the app handles certain network connections means user traffic may not be fully protected under specific conditions, particularly on public Wi-Fi.
- Some information stored locally on the device could be protected more robustly against access by other apps.
- The number of analytics and attribution services receiving behavioral data could be reduced to give users greater privacy.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the app's security and privacy posture at the time of the scan and are intended to help everyday users make informed decisions.
App Details
| Field | Value |
|---|---|
| App Name | TomTom - Maps & Traffic |
| Package ID | com.tomtom.speedcams.android.map |
| Version | 12.69.1-production |
| Scan Date | 2026-03-05 |
| Platform | Android |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 78/100 |