Garmin App Security

Former Member over 8 years ago

I have opened a thread with Garmin Customer Care in June 2016 :

Subject: App Security
Description: Hello and thank you for your support. I would like to know whether Garmin does any apps validation for security breaches for the apps uploaded to Garmin Connect IQ store. Here is the article talking about security issues : http://www.makeuseof.com/tag/fitness-tracker-putting-security-risk/

After multiple follow ups Garmin did not provide any answer and I have shared my concerns with other Garmin users. This is unacceptable practice that such a reputable company with good products does not take security seriously especially after being alerted by consumers and industry reports.

a1234.garmin over 8 years ago

https://www.garmin.com/en-US/blog/fitness/statement-on-garmin-connect-mobile-security/

journalists are so journalists...

Former Member over 8 years ago

Garmin App Security

Indeed, these are meaningless broad statements in the article. If they were sure they would have responded to me immediately. Any developer designing an app for my 920XT can know my location, add a virus and do many dangerous things. Android was flooded with that stuff and Apple is good because they have a validation process. With Garmin having 2.5 apps on their store, it should be a simple straight forward process of making sure that the apps are clean, but they don't do this.

jim_m_58 over 8 years ago

Have you seen the new app signing thing as of the 2.1.0 SDK? There's a sticky about it at the top of the forum.

Former Member over 8 years ago

thanks, saw it , but does not seem to solve the issue

geniuswrist over 8 years ago

I am not defending any company here.

All have responsibilities to their customers and all have to work hard to keep us safe.

But you have to be cautious about uninformed media statements and also you must not be naive and believe what the marketing guys of the companies sell to you.

https://www.cvedetails.com/vulnerability-list/vendor_id-49/product_id-15556/Apple-Iphone-Os.html

Cheers,

Robinson

Former Member over 8 years ago

I agree with you, however having a good ecosystem and doing best for their customers (Apple example) warrants having security issues , at least they try! Garmin does not have a validation process and does not respond to its customers (especially after I asked multiple times). what does it say about their process and credibility?

AlphaMonkeyC over 8 years ago

We take user data security very seriously and we continuously strive improve our validation and security process for apps on the Garmin Connect IQ store. We currently utilize a security system that: (1) uses digital signatures to validate developer identity on upload; (2) uses digital signatures to validate app store content on device; (3) encrypts content from the app to prevent security breaches; and (4) destroys app content if it detects an attacking app that is attempting to gain access. Additionally, the Garmin app store has a safe harbor system for reporting apps.

-AM