# Security & Privacy Scorecard

## APCOA Connect - Parking

## What This Means for You

Payment activity goes through Judo Payments, and location is processed via Google Maps and Google Pay. Some data is stored with moderate protections, so avoiding saving sensitive information beyond what the app requires is a reasonable precaution.

## Recommendation: Acceptable

**Best For:** Drivers who pay for parking on the go

## Key Findings

**Data Security** - 6 findings (3 high, 2 medium, 1 info)

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 1 finding (1 medium)

## Privacy Concerns

### What Data is Collected

APCOA Connect collects user location, payment details, and in-app activity. Device identifiers are also gathered as part of normal app operation.

### Third-Party Data Sharing

User data is shared with the following third-party services:

- **Judo Payments** - Processes parking payments
- **Google Maps** - Powers location and mapping features
- **Google Pay** - Handles payment transactions
- **ML Kit Barcode** - Reads barcodes scanned within the app
- **Expo SDK / React Native** - Core framework underpinning the app

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 68/100 |
| Privacy | 72/100 |
| Data Security | 58/100 |
| Network Security | 100/100 |
| Code Safety | 88/100 |
| Data Collection | 65/100 |
| Data Sharing | 78/100 |
| User Control | 100/100 |

## Positive Security Features

- All data transmitted between the app and remote services is sent over secure connections.
- Users have full control over their data and privacy choices within the app.
- The app's code is well-constructed with few safety concerns.

## Areas for Improvement

- How payment and account data is stored on the device could be better protected against local access.
- The app collects a broader range of information than a parking service strictly requires, which increases the amount of user data at risk.
- Data storage practices could be tightened to give personal details stronger at-rest protection.

---

## About This Analysis

This scorecard is produced through automated static analysis of the app's code and configuration. Scores reflect the security and privacy practices observed at the time of the scan.

### App Details

- **App:** APCOA Connect - Parking
- **Package:** com.apcoaconnect
- **Version:** 9.2.0 (90200)
- **Scan Date:** 2026-03-04
- **Platform:** Android