OVinfo Security & Privacy Scorecard
Android
App usage data may be used to show targeted ads via Google. Crash and diagnostic data is collected to improve the app. User activity is not shared with outside companies beyond Google's ad and analytics services.
Best for
Checking Dutch public transit times on the go
Findings
- 0 critical
- 2 high
- 6 medium
- 3 low
- 3 info
1 issue identified across security and privacy analysis.
Top security issues
- Deep Link Accepts Unencrypted HTTP Scheme
- Hardcoded API Credentials in HTTP Client
- Deep Link Input Validation Missing
Top privacy issues
- Pre-Consent Ad SDK Initialization via ContentProvider
- Consent Dialog Not Shown to Deep Link Users
- No Limit Ad Tracking Detection
Full analysis
OVinfo
Package: nl.skywave.ovinfo
Version: 4.7.8 (Build 566)
Scan Date: March 23, 2026
Security Score: 85/100
Privacy Score: 78/100
What This Means for You
App usage data may be used to show targeted ads via Google. Crash and diagnostic data is collected to improve the app. User activity is not shared with outside companies beyond Google's ad and analytics services.
Recommendation: Trustworthy
Best For: Checking Dutch public transit times on the go
Key Findings
Data Security - 2 findings (1 medium, 1 low)
Network Security - 1 finding (1 high)
Code Safety - 0 findings
Privacy - 6 findings (1 high, 3 medium, 2 low)
Privacy Concerns
What Data is Collected
The app collects crash reports and diagnostic data through Firebase Crashlytics to help improve stability. Google Mobile Ads SDK gathers behavioral and usage data to serve targeted advertisements. Google Maps SDK may collect location data to support transit mapping features.
Third-Party Data Sharing
Data is shared with Google through its advertising (Google Mobile Ads), analytics (Firebase Crashlytics), and mapping (Google Maps) services. No data flows to companies outside of Google's own suite of services.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 85/100 |
| Privacy | 78/100 |
| Data Security | 97/100 |
| Network Security | 87/100 |
| Code Safety | 96/100 |
| Data Collection | 78/100 |
| Data Sharing | 100/100 |
| User Control | 82/100 |
Positive Security Features
- Excellent data handling practices, reflected in a Data Security score of 97/100
- Data sharing is limited to Google's own suite of services, earning a perfect Data Sharing score of 100/100
- Strong code quality practices contribute to a Code Safety score of 96/100
Areas for Improvement
- Network communications could benefit from stronger protections, as data may travel with less protection than expected on public Wi-Fi.
- The scope of behavioral data gathered for advertising could be made more transparent, providing a clearer picture of what is collected during use.
- Adding user-facing controls over data collection would give users more direct choice over how usage information is handled.
About This Analysis
This scorecard is generated from automated static analysis of the app's code and configuration. Scores reflect practices observed at the time of the scan and may change as the app is updated.
App Details
- App Name: OVinfo
- Package ID: nl.skywave.ovinfo
- Version: 4.7.8 (Build 566)
- Scan Date: March 23, 2026
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 82/100 |