Flitsmeister Security & Privacy Scorecard
Android
User location and driving behavior are collected and shared with advertising services, including Google AdMob and Facebook-linked tools, to serve targeted ads. Firebase tracks in-app activity. Two serious data handling issues were identified that could put information stored on the device at risk.
Best for
Dutch drivers comfortable with ad-supported navigation
Findings
- 2 critical
- 3 high
- 4 medium
- 3 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Unencrypted Authentication Token Storage
- MD5-Based Encryption Key Derivation with Predictable Inputs
- Test Infrastructure Exposed in Production Build
Top privacy issues
- Unencrypted License Plate Storage (PII)
- Advertising ID Collection Without Consent
- Obfuscated SDK Initialization Prevents Consent Verification
Full analysis
Flitsmeister
nl.flitsmeister | Version 14.0 | Scanned 2026-03-05
What This Means for You
User location and driving behavior are collected and shared with advertising services, including Google AdMob and Facebook-linked tools, to serve targeted ads. Firebase tracks in-app activity. Two serious data handling issues were identified that could put information stored on the device at risk.
Recommendation: Use With Caution
Best For: Dutch drivers comfortable with ad-supported navigation
Key Findings
Data Security - 2 findings (1 critical, 1 info)
Network Security - 2 findings (1 medium, 1 low)
Code Safety - 0 findings
Privacy - 4 findings (2 high, 1 medium, 1 info)
Privacy Concerns
What Data is Collected
- Precise location and driving route data
- Driving behavior and speed patterns
- In-app activity and usage history
- Device identifiers used for ad targeting
Third-Party Data Sharing
User data is shared with the following third-party services:
- Google AdMob - advertising platform
- Facebook Shimmer - Facebook-linked interface and analytics tools
- Firebase - activity and event tracking
- Insider SDK - behavioral profiling
- Mapbox / MapLibre GL - mapping and navigation rendering
- Parse SDK - cloud data storage
- BeMobile CITS, Nordic DFU, YouTube Player, Rive Animation - additional integrations
Understanding the Scores
| Category | Score |
|---|---|
| Security | 58/100 |
| Privacy | 74/100 |
| Data Security | 62/100 |
| Network Security | 95/100 |
| Code Safety | 75/100 |
| Data Collection | 77/100 |
| Data Sharing | 99/100 |
| User Control | 90/100 |
Positive Security Features
- Network communications are handled securely in the vast majority of cases, earning a near-perfect Network Security score of 95/100.
- Data sharing practices are very tightly controlled, with a Data Sharing score of 99/100, indicating user data is not broadly transferred to unrelated third parties.
- The app provides strong user-facing controls over personal data, reflected in a User Control score of 90/100.
Areas for Improvement
- Sensitive information stored locally on the device could be better protected, reducing the risk of it being accessible to other software running on the same device.
- The app integrates a large number of advertising and analytics tools, which collectively gather more behavioral data about users than a navigation service strictly requires.
- Data handling safeguards for locally stored driving records and personal details should be strengthened to reduce the impact of the critical findings identified.
About This Analysis
This scorecard reflects static analysis of the app at the version listed below. Scores are based on security and privacy practices observed in the app code.
App Details
| Field | Value |
|---|---|
| App Name | Flitsmeister |
| Package ID | nl.flitsmeister |
| Version | 14.0 (versionCode 1228) |
| Developer | - |
| Scan Date | 2026-03-05 |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 66/100 |