CITT

    Scan results

    OV-fiets Beschikbaarheid

    Android

    A dedicated app for checking public transport bike availability in your area using GPS. Get real-time availability, opening hours, and plan your trips accordingly.

    CITT SCORE
    100
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Daily OV-fiets users who want quick bike availability checks

    What It Means For You

    User location is used to display nearby OV-fiets station availability via Google Maps. The app collects no personal account data and shares nothing with advertising or marketing services. Map interactions go to Google Play Services, which is standard for any app showing a map.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (2)

    Data Security

    1 total
    1 Low

    Third-Party Risk

    1 total
    1 Info

    Third-Party Services

    Google Play Services (Maps), Ktor HTTP Client, Koin, Compass, AndroidX Jetpack, Kotlin stdlib + Coroutines

    Security Strengths

    • ✓HTTPS-only communication (cleartext traffic blocked)
    • ✓No SSL/TLS certificate validation bypasses
    • ✓No hardcoded server-side secrets or credentials
    • ✓Stateless architecture with minimal data persistence
    • ✓No authentication system (no token theft risk)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    location
    maps
    public data
    stateless
    offline first

    Package

    nl.ovfietsbeschikbaarheid

    Version

    3.7.0 (versionCode: 28)

    Analysis Date

    Mar 10, 2026

    Classes Analyzed

    4,417

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Very Secure

    Key Findings

    Data Security - 1 finding (1 low)

    Network Security - 0 findings

    Code Safety - 0 findings

    Privacy - 0 findings

    Privacy Concerns

    What Data is Collected

    Device location is used solely to show nearby OV-fiets station availability on the map. No account details, names, or usage history are stored by the app.

    Third-Party Data Sharing

    Google Play Services receives location data to render the map. No data is shared with advertising, marketing, or analytics services.

    Understanding the Scores

    • Security: 99/100
    • Privacy: 100/100
    • Data Security: 99/100
    • Network Security: 100/100
    • Code Safety: 100/100
    • Data Collection: 100/100
    • Data Sharing: 100/100
    • User Control: 100/100

    Positive Security Features

    • No advertising or marketing service integrations
    • Minimal data collection limited to what is needed for map display
    • No behavioral tracking or user profiling

    Areas for Improvement

    • Location data sent to Google Maps is subject to Google's own privacy practices. Reviewing device-level Google location settings provides additional control over how this data is used.
    • A low-priority improvement in local data handling could further reduce the already-minimal chance of any data exposure on the device.

    About This Analysis

    This scorecard is based on static analysis of the app's code and configuration. Results reflect practices observed as of the scan date.

    App Details

    • Package: nl.ovfietsbeschikbaarheid
    • Version: 3.7.0 (build 28)
    • Developer: Not listed
    • Scan Date: March 10, 2026
    • Third-Party Services: Google Play Services (Maps), Ktor HTTP Client, Koin, Compass, AndroidX Jetpack, Kotlin stdlib + Coroutines

    Right of Reply

    Developer not yet contacted