# Security & Privacy Scorecard

## Garmin Connect™

**Version:** 5.20.2 | **Platform:** Android | **Analyzed:** 2026-01-22

**Overall Security:** 42/100 | **Privacy:** 48/100

## What This Means for You

Fitness activity, location, and health data are shared with multiple analytics and advertising services. Components from Baidu, Alipay, and Tencent process portions of user data through Chinese platforms alongside Western services like Firebase and Microsoft. The advertising ID is collected, linking workout and movement patterns to ad targeting across apps.

## Recommendation: Use With Caution

**Best For:** Garmin device owners comfortable with broad data sharing

## Key Findings

**Data Security** - 4 findings (1 critical, 1 high, 2 medium)

**Network Security** - 3 findings (1 critical, 1 high, 1 medium)

**Code Safety** - 0 findings

**Privacy** - 4 findings (3 high, 1 medium)

## Privacy Concerns

### What Data is Collected

- Fitness and workout activity records
- GPS location and movement patterns
- Health metrics including heart rate, sleep, and step counts
- Advertising ID, which links activity to a cross-app behavioral profile
- Device identifiers

### Third-Party Data Sharing

Data is shared with the following services:

- **Firebase Analytics** - behavioral analytics (Google)
- **Microsoft Application Insights** - usage and performance analytics
- **Google Play Services Measurement** - advertising measurement
- **Google Advertising ID** - cross-app ad targeting
- **Baidu Cloud Push** - push notifications processed through a Chinese platform
- **Alipay SDK** - data processing through a Chinese platform
- **Tencent Services** - analytics and data processing through a Chinese platform
- **Mapbox Maps SDK** - mapping and location processing
- **Google Maps API** - mapping and location processing
- **Strava** - fitness data integration

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 42/100 |
| Privacy | 48/100 |
| Data Security | 35/100 |
| Network Security | 40/100 |
| Code Safety | 45/100 |
| Data Collection | 52/100 |
| Data Sharing | 50/100 |
| User Control | 60/100 |

## Positive Security Features

- App uses the standard Android permission model to gate access to device sensors and location

## Areas for Improvement

- Health and fitness data is shared with a broad set of third-party services well beyond what is needed to sync with a Garmin device, including advertising networks that build behavioral profiles across apps.
- Location and movement data flows through both Western and Chinese third-party platforms, subjecting it to multiple legal jurisdictions with different privacy protections.
- The advertising ID collected by this app connects workout and health data to a wider profile used for ad targeting in other apps on the device.

---

## About This Analysis

This scorecard is generated through automated static analysis of the app's code and behavior patterns. Scores reflect the security and privacy posture of the version analyzed and may change with app updates.

### App Details

- **App:** Garmin Connect™
- **Package:** com.garmin.android.apps.connectmobile
- **Version:** 5.20.2
- **Platform:** Android
- **Scan Date:** 2026-01-22