OsmAnd is an open-source offline map and turn-by-turn navigation app built on OpenStreetMap data, published under GPLv3 by OsmAnd B.V., a private company registered in Amstelveen, the Netherlands (KvK 62066714), with the core app usable without any account. Its own Privacy Policy and Terms of Use state that the company aggregates non-personal data (installs, launch frequency, device model, software version, country, language, downloaded-map info), that a per-install UUID rotating every three months is sent with the user's IP address on every map download from OsmAnd servers, and that an optional 'opened screens' analytics stream is off by default. Sharing language is unusually strong — collected data is 'never shared with a third party', no user data is sold or used for AI training — but the policy names FastSpring as reseller for web purchases, Scaleway and Amazon as hosts for the paid, opt-in OsmAnd Cloud sync service, and Telegram for the optional tracker plugin. Warts: the UUID opt-out exists only on Android, F-Droid flags the UUID as a Tracking anti-feature and strips Google/Amazon billing and Google Location from its build, and Privacy Guides notes the anonymous-data toggle defaults to on in the iOS build. No breach, regulatory action, or third-party security audit involving OsmAnd was found in this research.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
12 ON FILE
COLLECTION
OsmAnd's Cloud documentation states the backup/sync service is an opt-in paid feature: registering requires an email address and an active OsmAnd Pro or free OsmAnd Start subscription, and once enabled it stores profile settings, tracks, favorites and OSM edits on OsmAnd's servers for cross-device sync — the one path by which personal location history leaves the device by design.
OsmAnd's Terms of Use (last updated 17 November 2025) describe the UUID sent with every vector-map download from OsmAnd servers: the request contains IP, UUID, days since install, number of starts and map information; the UUID rotates on reinstall and every three months, but on iOS it is tied to Apple's identifierForVendor, and the collection can be switched off (documented elsewhere as Android-only).
OsmAnd's Privacy Policy (last updated April 16, 2026) states the company aggregates non-personal data — installs, launch frequency, device model, software version, country, language and downloaded-maps info — and that map-download records are tied to a per-install UUID together with the IP address, timestamp and list of downloaded regions; nothing is collected when maps are installed manually, and the opened-screens stream is disabled by default.
OsmAnd's full application source is public on GitHub under the osmandapp organization, with roughly 5.9k stars, 135 watchers and 1.2k forks, so the code the store builds are derived from can be inspected and forked; the company's funding beyond paid subscriptions and its shareholders are not disclosed on any page fetched.
The repository LICENSE file identifies the copyright holder as OsmAnd BV of Amstelveen, Netherlands, publishing its Dutch Chamber of Commerce number (KvK 62066714) and VAT number, states the code is GPLv3 while artwork is CC-BY-NC-ND 4.0 with some proprietary assets, and names the principal authors — Victor Shcherb (originator), Alexey Pelykh, Hardy Mueller and Pavol Zibrita.
OsmAnd's Terms of Use state the UUID-linked download data is used only for reports and statistics and is never shared with any third party, and that the company allows the user data collection to be switched off, in which case no UUID accompanies download requests.
OsmAnd's Privacy Policy states collected data is never shared with a third party and, for the whole OsmAnd ecosystem, that the company does not share, sell or expose user data to any third-party or AI service and uses none of it to train ML models — while disclosing that FastSpring (Bright Market, LLC) is data controller for web-store checkouts, that Cloud data sits on Scaleway and Amazon servers, that data may be disclosed under legal process or transferred in a merger/acquisition, and that 'certain parts of non-personalized data' may be shared with partners or service providers.
OsmAnd's Privacy Policy provides a self-service account-deletion link with Cloud data deleted immediately on account deletion and server-side data purged within a week of a delete request; no breach, regulatory action, or independent third-party security audit involving OsmAnd was found in this research, so this pillar rests on a clean record without formal audit artifacts.
Privacy Guides lists OsmAnd under its Maps and Navigation recommendations, and in doing so documents that the UUID-on-download setting can only be disabled on Android and that the anonymous-data toggle for downloaded maps and used features is off by default on Android but on by default on iOS.
OsmAnd's Global Settings documentation describes an Analytics (Android) / 'Send anonymous data' (iOS) toggle that controls whether anonymous data about downloaded maps and visited screens is provided, states that location and viewed places are not collected, and documents an Android-only Identifiers setting (since v4.3) that stops the UUID from being sent with download requests.
F-Droid's listing for OsmAnd~ (net.osmand.plus) carries a 'Tracking' anti-feature for the unique installation ID sent with map-download requests (noting it can be disabled in Settings), a NonFreeAssets flag for the non-commercial artwork and voices, and states the F-Droid build removes Google Billing, Amazon in-app purchase, Google ratings, Telegram integration, Google Location and ANT+ integration — components present in the store builds.
The Apple App Store listing, with seller OsmAND B.V., declares an App Privacy label of only 'Data Not Linked to You' — Usage Data and Diagnostics — with no 'Data Used to Track You' or 'Data Linked to You' categories; Apple notes the developer's self-declaration is unverified.