Using fitness tracker apps for OSINT purposes

The smartwatches and fitness trackers we wear know a myriad of information about us…
From the places we visit, our coordinates, our health status: heart rate and blood pressure, for example, our sports activities, and much more.

Some of the popular apps by default, share data online… others do not, but it is the users themselves who voluntarily share this data. What is certain is that the validity of this data for OSINT purposes is indisputable.

Fitness Tracker Search Engine

To facilitate the searches I decided to create a custom search engine, able to propose results about profiles and activities in 6 popular fitness tracking apps: Gyroscope, AllTrails, Relive, Garmin, Ayvri, and MyPacer.

The CSE is available at the following link:

https://cse.google.com/cse?cx=f4810de23ed2b0a32,

or conveniently on my personal website: https://www.mattiavicenzi.it together with other tools.

Fitness Tracker Search Engine

On this page, I have decided to explain how to perform your own searches using the CSE and manually, while also listing the data available on each site.

Gyroscope

CSE SEARCH QUERY: Username, Name, Surname, Other

MANUAL SEARCH: site:gyrosco.pe -private

ok… maybe not the most popular app, but the quantity and quality of information publicly available with this app is impressive.

Mind section

In the mind section of each user it is possible to find very important information such as:

• The time the user went to sleep and the time he woke up, the total amount of sleep.
• The amount of time spent online and which applications the user used and for how long. e.g. half an hour spent on Gmail.
• User productivity statistics

Example Mind Section

The data are also historical, just press “see more” to see the previous data.

Heart section

in the heart section of each user it is possible to find very important information such as:

• The last recorded heart rate, or the current one if available
• Heart rate during the day (with any alerts)
• Heart HRV and healthy data
• Blood pressure (if recorded)
• Other heart health information

Example Heart Section

The data are also historical, just press “see more” to see the previous data.

Body section

in the body section of each user it is possible to find very important information such as:

• The weight of the user
• User’s fat mass in percentage
• Glucose data

Example Body Section

The data are also historical, just press “see more” to see the previous data.

Activity section

in the activity section of each user it is possible to find very important information such as:

• Daily steps and goal
• Sporting activity
• Activity statistics

Example Activity Section

The data are also historical, just press “see more” to see the previous data.

Places section

in the activity section of each user it is possible to find very important information such as:

• The places visited by the user and the time spent in each of them
• The route taken
• The means of transport used

Example Places Section

AllTrails

AllTrails Dashboard

CSE SEARCH QUERY: Username, Name, Surname, A Place, Other

MANUAL SEARCH: site: alltrails.com/members

AllTrails is a popular app dedicated to sharing tracks, the information is not a lot, but it can still be really useful.

For example, in the profile section it will be possible to identify:

Example Profile Section

• In the bio, the place of origin of the user
• If it is a paying user, through the badge pro
• Registration date and profile photo
• Favorite activities

In the recent activities section it is possible to identify the last routes covered and the date on which they were carried out.

Example Recent Activities Section

All other sections give information about the routes covered, altitude, completed routes etc…

This information can be useful to determine, for example, a subject’s home, movements, or where he or she was at a given time.

Relive

CSE SEARCH QUERY: Username, Name, Surname, A Place, Other

MANUAL SEARCH: site: relive.cc/view

This app is extremely popular, suitable for a large number of devices of different brands and full of useful information

Example Dashboard

Opening one of the results we will be directed to a short video containing the path of the track and the photos taken by the user on the track. You will get more information by pressing “View Interactive Map” or by adding /explore to the url.

Exemple Interactive Map

Directly from the dashboard it will be possible to visualize:

• For each point of the route, the distance from the starting point, the altitude, the time taken to reach that point, the degrees of slope and the speed
• In the title there is also the precise date on which the route has been run

Things get more interesting if we open our developer tools (inspect), reload the page and move to the network field.

Network Table

It will be enough to filter for the word “key” to receive a multitude of data.

Opening data?key you will get:

• The track id
• Privacy rules
• The type of activity : running, cycling, etc.
• The name of the device used to upload the data
• The precise timestamp of the start of the sport activity
• The exact coordinates of the start and end of the track.
• Tour name and whether it was automatically generated or set
• Distance, elevation, average speed and other sports activity data
• Images taken during the route, including data on the sporting activity at that precise moment, coordinates, photo name and timestamps
• User name, unique id, profile picture, its settings, providers: e.g. garmin, apple watch etc…

camera_metadata:

• camera setting, coordinates, app it interfaces to, etc…

camera?key: a csv file containing, for each point of the track:

• Precise coordinates
• Timestamp
• Elevation
• Temperature
• Speed
• Device information
• ecc..

Garmin

Garmin Profile Dashboard

CSE SEARCH QUERY: Username, Name, Surname, A Place, Other

MANUAL SEARCH:

site: connect.garmin.com/modern/profile/ for profile

site: connect.garmin.com/modern/activity for activity

Garmin is another popular application, also in this case we can find different useful data

By viewing a profile we can identify:

Example Profile Section

• Name and surname
• Place of origin
• Badge obtained and badge meaning
• Type of sport activity
• Social Network accounts and blogs linked to the account
• Sports activity metrics and latest activities

Example Activity Section

By opening a sporting activity it is possible to know:

• Type of sporting activity
• Date and time of the start of the sport activity
• Distance traveled
• Track total time
• Avg Speed
• Total Ascent
• Track and infographics
• Elevation
• Speed
• Device and firmware
• Multiple other statistics

also in this case doing “inspect” on the page and moving to the tab “network” you will get more information:

details?max

• Timestamp of the start of the activity
• Timestamp of the end of the activity
• Start coordinates
• End coordinates
• Activity ID
• elevation of start/end
• heart rate
• ecc

Ayvri

Ayvri profile dashboard

CSE SEARCH QUERY: Username, Name, Surname, A Place, Other

MANUAL SEARCH:

site: ayvri.com/profile for profile

site: ayvri.com/scene/ for activity

By identifying a profile you can get to know it:

• Profile photo
• Name
• Followers and following
• Recent activity

Example Activity Section

viewing activity you can know:

• Place
• Travel time at any point of the track
• Other people in the track
• Speed at any point on the track
• Altitude and climp speed
• Distance traveled and total distance

Conclusion

I hope I was helpful with this article, follow me on Linkedin and let me know how you used this information and some new tricks.

Linkedin:

Mattia Vicenzi - Co-fondatore - OSINTITALIA, Associazione di Promozione Sociale | LinkedIn

Personal site:

Home - Mattia Vicenzi Site

Fitness Tracker Search Engine