# Security & Privacy Scorecard

## Cruiser GPS Navigation

**Version:** 5.8.1 | **Scan Date:** March 5, 2026

**Security Score:** 52/100 | **Privacy Score:** 100/100

## What This Means for You

Location and destination data are not collected, sold, or shared with advertisers or data brokers. The app fetches routes from open mapping services, and some of those requests are not fully secured, so destination queries could be visible on public networks. No analytics companies receive information about where users go or how they use the app.

## Recommendation: Acceptable

**Best For:** Cyclists wanting navigation without ad tracking

## Key Findings

**Data Security** - 5 findings (1 critical, 1 high, 2 medium, 1 info)

**Network Security** - 4 findings (2 critical, 1 high, 1 info)

**Code Safety** - 0 findings

**Privacy** - 0 findings

## Privacy Concerns

### What Data is Collected

Routes and location are processed for navigation purposes only. The developer does not collect personal information, usage data, or behavioral profiles. Data Collection and User Control scores both reached 100/100, reflecting a minimal-data approach throughout the app.

### Third-Party Data Sharing

The app connects to open-source and community mapping services, including CycleStreets, GraphHopper, OpenRouteService, BRouter, OSRM, Valhalla, and Overpass API, to calculate and deliver route results. These are routing infrastructure providers, not advertising or data broker networks. Google Play Billing handles purchase transactions for any premium features. No third-party company receives information about where users go or their in-app behavior.

## Understanding the Scores

- **Security:** 52/100
- **Privacy:** 100/100
- **Data Security:** 60/100
- **Network Security:** 55/100
- **Code Safety:** 92/100
- **Data Collection:** 100/100
- **Data Sharing:** 100/100
- **User Control:** 100/100

## Positive Security Features

- Route data is fetched from community-maintained open mapping services rather than proprietary servers, reducing centralized data exposure.
- No advertising networks or behavioral tracking companies are integrated into the app.
- Code safety practices score strongly at 92/100, reflecting low-risk coding patterns in the app's core logic.

## Areas for Improvement

- Some route requests travel over unencrypted connections, which means destination queries could be read by others on the same Wi-Fi network.
- Certain data stored by the app uses protection settings that could allow other apps on a compromised device to access it.
- A portion of network connections do not verify the identity of the server they contact, making it possible for requests to reach an unintended server without the app detecting it.

---

## About This Analysis

This scorecard is based on automated static analysis of the app's code, performed on the version listed below. Scores and findings reflect the state of the app at the time of analysis and may not account for updates released afterward.

### App Details

- **App Name:** Cruiser GPS Navigation
- **Package ID:** gr.talent.cruiser
- **Version:** 5.8.1 (build 3000072)
- **Scan Date:** March 5, 2026