TomTom - Maps & Traffic Security & Privacy Scorecard

Android

78
Overall trust score
Acceptable
70
Security
86
Privacy

Usage patterns and in-app behavior are shared with analytics and attribution services including Adjust and Mixpanel. Location activity powers the navigation features but also passes through third-party crash and engagement platforms. Data sharing outside the app is limited, and users retain reasonable control over their experience.

Best for

Daily commuters comfortable with standard analytics

Findings

  • 1 critical
  • 3 high
  • 6 medium
  • 2 low
  • 7 info

1 issue identified across security and privacy analysis.

Top security issues

  • Insecure TrustManager in Eclipse Paho MQTT Library
  • Unprotected ADB Backup Exposes Navigation Data
  • Google Sign-In Tokens Stored in Plain SharedPreferences

Top privacy issues

  • Pre-Consent Analytics SDK Initialization
  • Third-Party SDK Data Stored Unencrypted
  • Room Database Without Encryption

Full analysis

TomTom - Maps & Traffic

Overall Security Score: 70/100 | Privacy Score: 86/100

What This Means for You

Usage patterns and in-app behavior are shared with analytics and attribution services including Adjust and Mixpanel. Location activity powers the navigation features but also passes through third-party crash and engagement platforms. Data sharing outside the app is limited, and users retain reasonable control over their experience.

Recommendation: Acceptable

Best For: Daily commuters comfortable with standard analytics

Key Findings

Data Security - 8 findings (2 high, 1 medium, 5 info)

Network Security - 3 findings (1 critical, 2 info)

Code Safety - 0 findings

Privacy - 2 findings (1 high, 1 medium)

Privacy Concerns

What Data is Collected

The app collects precise location continuously to deliver navigation and real-time traffic features. Device identifiers, usage patterns, and behavioral signals are gathered through multiple analytics integrations. Crash and error data is sent to diagnostic services whenever the app encounters a problem.

Third-Party Data Sharing

The following third-party services receive data from use of the app:

  • Adjust - Tracks installs and attributes user actions to advertising campaigns
  • Mixpanel - Measures in-app behavior and engagement patterns
  • Sentry - Receives crash reports and diagnostic information from the device
  • Firebase - Handles analytics and push notification delivery
  • UrbanAirship (Airship) - Powers push notification targeting and delivery
  • Unity3D - Supports rendering or interactive map features
  • Microsoft Cognitive Services Speech - Processes voice commands spoken to the app
  • Google Play Services - Core Android platform integration
  • Android Auto - Enables display and control through a vehicle's screen
  • gRPC - Backend data communication framework
  • Ktor - Networking framework used for server requests

Understanding the Scores

Category Score
Security 70/100
Privacy 86/100
Data Security 82/100
Network Security 77/100
Code Safety 95/100
Data Collection 86/100
Data Sharing 100/100
User Control 91/100

Positive Security Features

  • Code safety practices are strong, earning a 95/100 score with well-structured binary protections.
  • Data sharing with outside parties is tightly scoped, achieving a perfect 100/100 data sharing score.
  • Users retain meaningful control over their in-app experience, reflected in a 91/100 user control score.
  • Data collection is proportionate to the navigation use case, with an 86/100 data collection score.

Areas for Improvement

  • How the app handles certain network connections means user traffic may not be fully protected under specific conditions, particularly on public Wi-Fi.
  • Some information stored locally on the device could be protected more robustly against access by other apps.
  • The number of analytics and attribution services receiving behavioral data could be reduced to give users greater privacy.

About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the app's security and privacy posture at the time of the scan and are intended to help everyday users make informed decisions.

App Details

Field Value
App Name TomTom - Maps & Traffic
Package ID com.tomtom.speedcams.android.map
Version 12.69.1-production
Scan Date 2026-03-05
Platform Android

Versions & scan history

ScanDateOverall score
#1 (current) 78/100