AT Mobile: Find your way Security & Privacy Scorecard

Android

38
Overall trust score
Unsafe
35
Security
40
Privacy

Precise location is tracked continuously in the background and shared with third-party services, including analytics and mapping providers. Usage patterns and survey responses may be collected by Firebase and Qualtrics. Users have limited control over how their data is used or deleted.

Best for

Auckland commuters comfortable with location tracking

Avoid if

You prefer not sharing your location with third parties

Findings

  • 0 critical
  • 0 high
  • 0 medium
  • 0 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • OkHttp CVE-2023-3635 Authentication Bypass
  • Mapbox Secret Token Exposed in BuildConfig
  • Unencrypted OAuth Tokens with Backup Enabled

Top privacy issues

  • Ad Personalization Enabled by Default Without Consent
  • Background Location Tracking with Activity Recognition
  • Multiple Device Identifiers Collected

Full analysis

AT Mobile: Find your way

Version: 1.41.1 | Scan Date: 2026-02-07 | Platform: Android

What This Means for You

Precise location is tracked continuously in the background and shared with third-party services, including analytics and mapping providers. Usage patterns and survey responses may be collected by Firebase and Qualtrics. Users have limited control over how their data is used or deleted.

Recommendation: Use With Caution

Best For: Auckland commuters comfortable with location tracking
Avoid If: You prefer not sharing your location with third parties

Key Findings

Data Security - 3 findings (1 critical, 2 high)

Network Security - 4 findings (1 critical, 1 high, 2 medium)

Code Safety - 0 findings

Privacy - 7 findings (1 critical, 4 high, 1 medium, 1 low)

Privacy Concerns

What Data is Collected

  • Precise location (continuous background tracking)
  • App usage patterns and behavioral data
  • Survey responses and in-app feedback (via Qualtrics)
  • Device identifiers and app performance metrics

Third-Party Data Sharing

User location, usage, and device data are shared with the following third-party services:

  • Firebase Analytics - usage and behavioral data
  • Firebase Messaging - push notification delivery
  • Firebase Remote Config - app configuration data
  • Firebase Performance - app performance metrics
  • Mapbox Maps - location and mapping interactions
  • Mapbox Telemetry - location telemetry data
  • TransistorSoft Background Geolocation - continuous background location tracking
  • Qualtrics Surveys - survey responses and user feedback
  • Huawei Mobile Services - device services on Huawei devices

Understanding the Scores

Category Score
Security 35/100
Privacy 40/100
Data Security 25/100
Network Security 45/100
Code Safety 55/100
Data Collection 45/100
Data Sharing 60/100
User Control 30/100

Positive Security Features

The app integrates established third-party platforms, including Firebase and Mapbox, which maintain their own published security standards. No additional app-level security enhancements were identified in this version.

Areas for Improvement

  • User location is tracked in the background at all times. The app should offer clear consent controls and the ability to limit background tracking without losing access to core journey-planning features.
  • User rights to access or delete personal data are not surfaced within the app. A clear, in-app path to request data removal would give users meaningful control over what is stored about them.
  • Data sent between the app and external services travels with less protection than expected, which may affect users on public or shared networks.

About This Analysis

Scores are generated by automated static analysis of the app's compiled code and configuration files. They reflect the state of the app at the time of the scan and may not capture server-side practices or runtime behavior.

App Details

  • App: AT Mobile: Find your way
  • Package ID: nz.govt.at.atmobile
  • Version: 1.41.1
  • Scan Date: 2026-02-07

Versions & scan history

ScanDateOverall score
#1 (current) 38/100