Waterkaarten: Boat Navigation Security & Privacy Scorecard
Android
Usage patterns and navigation activity are tracked by Firebase and Facebook, which may use that data for analytics and advertising. App data is handled by several third-party services, including crash reporting tools that collect device and session information. No data is reported as shared externally for commercial purposes beyond these analytics providers.
Best for
Boaters comfortable with standard analytics
Findings
- 1 critical
- 4 high
- 5 medium
- 2 low
- 4 info
1 issue identified across security and privacy analysis.
Top security issues
- Universal File Access Enabled in PDF WebView
- Unencrypted Authentication Token Storage
- SQL Injection Vulnerability in Tile Database
Top privacy issues
- Pre-Consent Firebase Analytics Initialization
- Facebook SDK Auto-Logging Without Consent
- No Consent Management Platform Implemented
Full analysis
Waterkaarten: Boat Navigation
What This Means for You
Usage patterns and navigation activity are tracked by Firebase and Facebook, which may use that data for analytics and advertising. App data is handled by several third-party services, including crash reporting tools that collect device and session information. No data is reported as shared externally for commercial purposes beyond these analytics providers.
Recommendation: Acceptable
Best For: Boaters comfortable with standard analytics
Key Findings
Data Security - 3 findings (2 high, 1 medium)
Network Security - 1 finding (1 medium)
Code Safety - 0 findings
Privacy - 5 findings (2 high, 1 medium, 1 low, 1 info)
Privacy Concerns
What Data is Collected
The app collects navigation and usage data through Firebase Analytics, including session details, device identifiers, and behavioral patterns during time on the water. Facebook SDK also receives activity signals from user sessions. Crashlytics gathers device state and session context when the app encounters errors.
Third-Party Data Sharing
Activity data is processed by Firebase (Google), Facebook, CaptainAI, and associated services. These providers receive usage patterns for analytics, crash reporting, and service improvement. No sharing of user data with external advertising networks or data brokers beyond these integrated services has been observed.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 70/100 |
| Privacy | 76/100 |
| Data Security | 68/100 |
| Network Security | 98/100 |
| Code Safety | 72/100 |
| Data Collection | 73/100 |
| Data Sharing | 100/100 |
| User Control | 79/100 |
Positive Security Features
- Network communications follow strong security practices, earning a near-perfect score of 98/100
- No sharing of user data with external commercial parties or data brokers has been detected (Data Sharing: 100/100)
- In-app purchases are routed through Google Play Billing, a well-established and trusted payment framework
- User control mechanisms are present, giving users some ability to manage how the app interacts with their information
Areas for Improvement
- Some data stored locally on the device could benefit from stronger protections, reducing the risk of exposure if the device is accessed by others.
- The range of personal information gathered during routine use, including through analytics and crash reporting, could be reduced to only what is strictly necessary for the app to function.
- Clearer in-app disclosure about what information is collected during user sessions would make it easier for users to make informed decisions about their privacy.
About This Analysis
This scorecard is generated from automated static analysis of the app's code and configuration. Scores reflect observed practices at the time of the scan and may not capture every aspect of app behavior at runtime.
App Details
- App: Waterkaarten: Boat Navigation
- Package: nl.anwb.android.anwbwaterkaarten
- Version: 12.1.2 (2284)
- Platform: Android
- Scan Date: 2026-03-04
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 73/100 |