Security
Where the data goes, what Caskfive can see, and how you get it back out. These are the questions a security review asks first, so they are answered first.
What does the Android app send to Caskfive?
Your survey data: nothing, unless you upload it to NS Analytics. The Google Play build does send crash reports and basic usage analytics to Google's Firebase, so bugs get noticed and fixed. Survey records are not part of either. If you would rather it sent nothing at all, the build on IzzyOnDroid leaves Firebase out.
Network Survey records to the device it runs on. When you turn streaming on, it sends to the endpoints you configure: your own MQTT broker or gRPC endpoint, NS Analytics if you use it, and the public OpenCelliD and BeaconDB databases if you switch that on.
The app works offline and holds its survey files locally until you move them, so a device that never reaches a network still collects.
You do not have to take that on trust. Network Survey is open source under Apache 2.0 and its source is on GitHub, so your own engineers can read what it sends and build it themselves. NS Analytics, the hosted web platform, is not open source; it is covered below.
Where does NS Analytics data live?
In the hosted service at analytics.networksurvey.app, unless you run your own copy. The table is the short answer; the privacy policy on networksurvey.app is the authoritative one, and this page does not restate it.
| Question | Answer |
|---|---|
| Data to Caskfive from the app | Survey data only when you upload it to NS Analytics; the Play build also sends crash reports and usage analytics to Firebase |
| Hosted service | Web application at analytics.networksurvey.app; nothing to install beyond the phone app |
| In transit | HTTPS/TLS |
| At rest | Encrypted by the managed platform the service runs on |
| Deletion | Delete surveys from your account; deleting the account removes its data |
| Retention | Surveys are kept until you delete them |
| Export | CSV, on demand, in a documented format |
| Self-hosted | Available for enterprise; the service runs in your infrastructure |
| Source | Network Survey is Apache 2.0 on GitHub; NS Analytics is not open source |
| Incident contact | support@caskfive.com |
What the hosted service stores about a survey, how long it holds it, and who processes it on the way are documented in the Network Survey privacy policy. That document is the one that governs.
How do you get your data out?
Export CSV from NS Analytics whenever you want it, and the Android app writes CSV files on the device. There is no export request to file and no waiting period.
Getting the data out is also the continuity answer. If Caskfive stopped tomorrow, your surveys would already be in a format your own tools read, and the collector is Apache 2.0, so you could build it yourself and keep collecting.
Can NS Analytics run on your own infrastructure?
Yes. Self-hosted deployment is available for enterprise, which puts the survey data inside your own environment and takes the hosted service out of the question entirely.
Email support@caskfive.com with what your environment requires.
Reporting a security problem
Email support@caskfive.com, the same address every other question on this site goes to.
Include what you found and how to reproduce it. Vulnerability reports in Network Survey can also be opened against the GitHub repository if the finding is already public in the source.
Questions this page does not answer? Email support@caskfive.com or use the contact form.