CITT

    Scan results

    Cruiser GPS Navigation

    Android

    Cruiser is an offline GPS navigation and route planning app with support for multiple profiles (car, motorcycle, bike, walking, hiking). Features include voice navigation, offline maps, route customization, trip recording, and import of GPX/KML routes. Supports external device control and extensive

    CITT SCORE
    76
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Cyclists wanting navigation without ad tracking

    What It Means For You

    Location and destination data are not collected, sold, or shared with advertisers or data brokers. The app fetches routes from open mapping services, and some of those requests are not fully secured, so destination queries could be visible on public networks. No analytics companies receive information about where users go or how they use the app.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (12)

    Data Security

    5 total
    1 Critical
    1 High
    2 Medium
    1 Info

    Network Security

    4 total
    2 Critical
    1 High
    1 Info

    Code Security

    3 total
    2 Medium
    1 Low

    Third-Party Services

    OkHttp, Google Play Billing, CycleStreets, GraphHopper, OpenRouteService, BRouter, OSRM, Valhalla, Overpass API
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    location
    navigation
    sensitive data
    offline maps

    Package

    gr.talent.cruiser

    Version

    5.8.1 (versionCode: 3000072)

    Analysis Date

    Mar 5, 2026

    Classes Analyzed

    7,844

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Acceptable

    Key Findings

    Data Security - 5 findings (1 critical, 1 high, 2 medium, 1 info)

    Network Security - 4 findings (2 critical, 1 high, 1 info)

    Code Safety - 0 findings

    Privacy - 0 findings

    Privacy Concerns

    What Data is Collected

    Routes and location are processed for navigation purposes only. The developer does not collect personal information, usage data, or behavioral profiles. Data Collection and User Control scores both reached 100/100, reflecting a minimal-data approach throughout the app.

    Third-Party Data Sharing

    The app connects to open-source and community mapping services, including CycleStreets, GraphHopper, OpenRouteService, BRouter, OSRM, Valhalla, and Overpass API, to calculate and deliver route results. These are routing infrastructure providers, not advertising or data broker networks. Google Play Billing handles purchase transactions for any premium features. No third-party company receives information about where users go or their in-app behavior.

    Understanding the Scores

    • Security: 52/100
    • Privacy: 100/100
    • Data Security: 60/100
    • Network Security: 55/100
    • Code Safety: 92/100
    • Data Collection: 100/100
    • Data Sharing: 100/100
    • User Control: 100/100

    Positive Security Features

    • Route data is fetched from community-maintained open mapping services rather than proprietary servers, reducing centralized data exposure.
    • No advertising networks or behavioral tracking companies are integrated into the app.
    • Code safety practices score strongly at 92/100, reflecting low-risk coding patterns in the app's core logic.

    Areas for Improvement

    • Some route requests travel over unencrypted connections, which means destination queries could be read by others on the same Wi-Fi network.
    • Certain data stored by the app uses protection settings that could allow other apps on a compromised device to access it.
    • A portion of network connections do not verify the identity of the server they contact, making it possible for requests to reach an unintended server without the app detecting it.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code, performed on the version listed below. Scores and findings reflect the state of the app at the time of analysis and may not account for updates released afterward.

    App Details

    • App Name: Cruiser GPS Navigation
    • Package ID: gr.talent.cruiser
    • Version: 5.8.1 (build 3000072)
    • Scan Date: March 5, 2026

    Right of Reply

    Developer not yet contacted