# Security & Privacy Scorecard

## AT Mobile: Find your way

**Version:** 1.41.1 | **Scan Date:** 2026-02-07 | **Platform:** Android

## What This Means for You

Precise location is tracked continuously in the background and shared with third-party services, including analytics and mapping providers. Usage patterns and survey responses may be collected by Firebase and Qualtrics. Users have limited control over how their data is used or deleted.

## Recommendation: Use With Caution

**Best For:** Auckland commuters comfortable with location tracking
**Avoid If:** You prefer not sharing your location with third parties

## Key Findings

**Data Security** - 3 findings (1 critical, 2 high)

**Network Security** - 4 findings (1 critical, 1 high, 2 medium)

**Code Safety** - 0 findings

**Privacy** - 7 findings (1 critical, 4 high, 1 medium, 1 low)

## Privacy Concerns

### What Data is Collected

- Precise location (continuous background tracking)
- App usage patterns and behavioral data
- Survey responses and in-app feedback (via Qualtrics)
- Device identifiers and app performance metrics

### Third-Party Data Sharing

User location, usage, and device data are shared with the following third-party services:

- **Firebase Analytics** - usage and behavioral data
- **Firebase Messaging** - push notification delivery
- **Firebase Remote Config** - app configuration data
- **Firebase Performance** - app performance metrics
- **Mapbox Maps** - location and mapping interactions
- **Mapbox Telemetry** - location telemetry data
- **TransistorSoft Background Geolocation** - continuous background location tracking
- **Qualtrics Surveys** - survey responses and user feedback
- **Huawei Mobile Services** - device services on Huawei devices

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 40/100 |
| Data Security | 25/100 |
| Network Security | 45/100 |
| Code Safety | 55/100 |
| Data Collection | 45/100 |
| Data Sharing | 60/100 |
| User Control | 30/100 |

## Positive Security Features

The app integrates established third-party platforms, including Firebase and Mapbox, which maintain their own published security standards. No additional app-level security enhancements were identified in this version.

## Areas for Improvement

- User location is tracked in the background at all times. The app should offer clear consent controls and the ability to limit background tracking without losing access to core journey-planning features.
- User rights to access or delete personal data are not surfaced within the app. A clear, in-app path to request data removal would give users meaningful control over what is stored about them.
- Data sent between the app and external services travels with less protection than expected, which may affect users on public or shared networks.

---

## About This Analysis

Scores are generated by automated static analysis of the app's compiled code and configuration files. They reflect the state of the app at the time of the scan and may not capture server-side practices or runtime behavior.

### App Details

- **App:** AT Mobile: Find your way
- **Package ID:** nz.govt.at.atmobile
- **Version:** 1.41.1
- **Scan Date:** 2026-02-07