AT Mobile: Find your way Security & Privacy Scorecard
Android
Precise location is tracked continuously in the background and shared with third-party services, including analytics and mapping providers. Usage patterns and survey responses may be collected by Firebase and Qualtrics. Users have limited control over how their data is used or deleted.
Best for
Auckland commuters comfortable with location tracking
Avoid if
You prefer not sharing your location with third parties
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- OkHttp CVE-2023-3635 Authentication Bypass
- Mapbox Secret Token Exposed in BuildConfig
- Unencrypted OAuth Tokens with Backup Enabled
Top privacy issues
- Ad Personalization Enabled by Default Without Consent
- Background Location Tracking with Activity Recognition
- Multiple Device Identifiers Collected
Full analysis
AT Mobile: Find your way
Version: 1.41.1 | Scan Date: 2026-02-07 | Platform: Android
What This Means for You
Precise location is tracked continuously in the background and shared with third-party services, including analytics and mapping providers. Usage patterns and survey responses may be collected by Firebase and Qualtrics. Users have limited control over how their data is used or deleted.
Recommendation: Use With Caution
Best For: Auckland commuters comfortable with location tracking
Avoid If: You prefer not sharing your location with third parties
Key Findings
Data Security - 3 findings (1 critical, 2 high)
Network Security - 4 findings (1 critical, 1 high, 2 medium)
Code Safety - 0 findings
Privacy - 7 findings (1 critical, 4 high, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
- Precise location (continuous background tracking)
- App usage patterns and behavioral data
- Survey responses and in-app feedback (via Qualtrics)
- Device identifiers and app performance metrics
Third-Party Data Sharing
User location, usage, and device data are shared with the following third-party services:
- Firebase Analytics - usage and behavioral data
- Firebase Messaging - push notification delivery
- Firebase Remote Config - app configuration data
- Firebase Performance - app performance metrics
- Mapbox Maps - location and mapping interactions
- Mapbox Telemetry - location telemetry data
- TransistorSoft Background Geolocation - continuous background location tracking
- Qualtrics Surveys - survey responses and user feedback
- Huawei Mobile Services - device services on Huawei devices
Understanding the Scores
| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 40/100 |
| Data Security | 25/100 |
| Network Security | 45/100 |
| Code Safety | 55/100 |
| Data Collection | 45/100 |
| Data Sharing | 60/100 |
| User Control | 30/100 |
Positive Security Features
The app integrates established third-party platforms, including Firebase and Mapbox, which maintain their own published security standards. No additional app-level security enhancements were identified in this version.
Areas for Improvement
- User location is tracked in the background at all times. The app should offer clear consent controls and the ability to limit background tracking without losing access to core journey-planning features.
- User rights to access or delete personal data are not surfaced within the app. A clear, in-app path to request data removal would give users meaningful control over what is stored about them.
- Data sent between the app and external services travels with less protection than expected, which may affect users on public or shared networks.
About This Analysis
Scores are generated by automated static analysis of the app's compiled code and configuration files. They reflect the state of the app at the time of the scan and may not capture server-side practices or runtime behavior.
App Details
- App: AT Mobile: Find your way
- Package ID: nz.govt.at.atmobile
- Version: 1.41.1
- Scan Date: 2026-02-07
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 38/100 |