How to choose a private travel tracker app: eight things to check

Why does a travel app deserve a privacy check?

A list of countries with dates looks harmless until you read it as a calendar. It shows when your home was empty, where you go and how often. Apps that track routes make this sharper: a trail of coordinates reveals your hotel, your habits and the people you travel with.

Not every tracker is risky. Many are made by small teams who store little, and several of the best known ones are built on the same few services. Treat the checklist as a way to compare, not as a reason to avoid every app. But the way to find out is to look, because the marketing line private by design costs nothing to write. The checks below take about five minutes and need only the App Store page and a few taps in the app.

Is an account required?

Start here, since it decides the rest. An app that needs an email address and a password before it shows your map has your identity and your travel history in one database. An app with no sign-in keeps the two apart.

Accounts have uses, such as syncing across devices and recovering data. But you can get both without handing over your identity, for example through your own iCloud. If you can see the app's main screen without signing in, that is a good sign. Be wary of apps that offer sign-in with a social network only, because that connects your travel history to your public profile.

Inkpass has no sign-in at all. The album lives on the iPhone, and backup is optional through your own iCloud, a private link or a file.

What do the App Store privacy details say?

Apple requires developers to describe their data practices, and the summary appears on each app page as the App Privacy section. Apple explains the format in its App Privacy Details documentation. You will see categories such as Data Not Collected, Data Not Linked to You and Data Used to Track You.

Read it as a claim by the developer, not as a certificate. Apple describes the rules, but the label is filled in by the developers themselves. A reputable app will match its policy and its behavior. Check that the privacy policy exists, is readable and says what the label says. If the label and the policy disagree, that is a reason to look elsewhere.

Does it include analytics or ad code?

Many apps include third-party code for analytics, crash reports or ads. Each piece can send information about you to another company. The listing does not always make this clear. The privacy policy usually does, and good policies name the tools.

The cleanest answer is that the app contains none. Many popular free apps pay for themselves through ads and data, so a free app with no ad code should say how it earns its keep. A clear paid tier is a more honest answer than a hidden one. Inkpass states that it has no analytics or advertising code, no crash-reporting SDK, and no tracking across apps or websites. For purchases it uses a third-party billing service to validate Pro, which receives an anonymous app user ID and App Store purchase history, as the privacy page explains.

What do share links contain?

Sharing is where private apps leak. A link that carries your full profile, your dates and your name is a lot to give a chat group. Ask what the link holds and where it goes. Prefer links whose contents are minimal and visible before you send.

In Inkpass an Overlap or Crew link carries only the countries you have been to and an optional name up to 16 characters. It never holds your Want to go list, years, notes or location, and the data sits after the # in the address, the part of an address that is never sent to a server. The compare maps page describes it in full. A Backup link is different: it contains the whole album, so treat it like a password.

Who controls the backup, and can I delete everything?

Two final checks decide whether the data is really yours. Ask these questions:

• Can I back up without creating an account, and is the backup stored somewhere I control?
• Can I export my data in a format I can read, such as a file?
• Is there a clear way to delete everything, and does it include the backup?
• If I stop using the app, does any copy of my data remain on a server?

What does a good answer look like?

In Inkpass, the answers read like this. Backup works through your own iCloud, a private link or a JSON file, as described on the backup and restore page. Delete all data lives under Me, Settings and removes stamps, friends, notes and settings from the phone and the iCloud copy. There is no server copy to ask anyone to delete.

You do not have to choose Inkpass to use the checklist. Apply the same eight points to any tracker, from a stamp album to a route logger, and compare the answers. The one with the shortest list of things you have to trust is usually the one to keep.