[GIS] Is the data supplied to Google Maps or leaflet.js javascript rest API is private

google-maps-apileaflet

I have a dataset which has to be used for internal/intranet web application. Is the data supplied to google map javascript api to draw map as well as to show meta information through markers is private (data used intenally only ) and does not go to google server. Example : on mouse over newyork city marker/circles/point it should show private meta information .This info i dont want to be sent to public webservice/javascripts.I understand i need to send lat long geo information which is ok but dont want my custom data to travel to public and comeback. Does google map api safe for my usecase.

else i would use something like d3.js maps which assures me that all the data used are within the internal scope.

Best Answer

If you draw an element (or a collection of elements) from your own data, there are three potential scenarios:

  • If you're dealing with markers, polylines, polygons. circles, rectangles or features, you don't send any data to Google. All those elements reside in their own layer, overlayed on top of the map.

  • If you need to draw a KML Layer, Google will load and parse the contents of the url parameter. That URL must be accesible for Google and won't work with urls on an intranet or behind a login wall. So yes, in that case they will have the contents of that KML in their servers.

  • If you want to use Fusion Tables Layer, the actual Fusion Table, residing in your google drive, must be publicly available.

For the second and third scenarios, you don't get to manage the analytic data in your browser context. Instead you provide Google with means to access that data, parse it and serve it to you in the form of pre rendered tiles with your KML or Fusiontable embedded on them. The illusion of them being a separate object is given by the custom click listeners they provide.

I wouldn't worry about Google sniffing whatever information you're drawing. They already know everything and they do not care.

Regarding your use case, the internal/intranet is only allowed during development phase. You might get your site or IP banned for violating the TOS. Situations like yours have spanned several startups building their own mapping solutions or porting to open source tools.

TL/DR: use the browser console to inspect requests made whenever you add data.

Related Question