← All tool ratings

OpenStreetMap

Open map data used by the Washington Post, LA Times, and Chicago Tribune. Free, community-maintained, no tracking.

Data & analysis
Open source
Strong
https://www.openstreetmap.org Reviewed 2026-04-03 Editorial assessment by Mike Schneider — based on public security research and audits

What should journalists know about OpenStreetMap?

OpenStreetMap is the Wikipedia of maps. 10 million+ registered contributors maintain a global dataset that often has better coverage of local detail than Google Maps — especially in regions underserved by commercial mapping. The Washington Post, LA Times, and Chicago Tribune use OSM data for news mapping. Mapbox, which powers many newsroom map projects, runs on OSM data. The data is licensed under ODbL: you can use, modify, and share it freely as long as you attribute OpenStreetMap contributors and share any modifications to the database under the same license. You do not need to open-source your entire application — only changes to the OSM data itself. This makes it practical for newsroom use. For journalists who need to create embeddable maps without writing code, uMap (umap-project.org) is the companion tool. uMap lets you drop markers, draw shapes, import GeoJSON or CSV data, and generate embed codes — all using OpenStreetMap layers. No account required to create a map. Free. Open-source (AGPLv3). The OpenStreetMap Foundation is a UK nonprofit. It pays for servers, one site reliability engineer, and the annual State of the Map conference. Funding comes from donations and corporate supporters. The Foundation does not control the data — the community does. This is both a strength (no single corporate gatekeeper) and a limitation (data quality varies by region and contributor activity). Privacy is strong by design. Viewing OSM maps requires no account and generates no user-tracking cookies from OSM itself. Editing requires an account, but the Foundation's privacy policy limits data collection to what's necessary for the service. If you embed OSM tiles on your news site, your readers' browsers contact OSM tile servers — consider self-hosting tiles or using a CDN for high-traffic stories to reduce third-party requests. The main limitation: OSM is raw data, not a polished product. Google Maps has Street View, business hours, real-time traffic, transit routing, and indoor maps. OSM has none of that out of the box. You need additional tools (Mapbox, Leaflet, QGIS, uMap) to turn OSM data into publishable maps. For newsrooms with GIS skills, that's fine. For reporters who just need a quick map, the learning curve is real.

Best for

Data journalism maps, locator maps for stories, disaster and conflict coverage mapping, geographic analysis, embedding interactive maps in articles (via uMap or Leaflet), newsroom projects that need open licensing without Google Maps restrictions.

Not for

Quick consumer-style maps with business listings and reviews (use Google Maps). Real-time traffic or transit routing. Street View photography. Reporters who need a polished map in under five minutes with no GIS experience — the learning curve requires investment.

Security & Privacy

Encryption in transit Yes

Data is scrambled while being sent to their servers

Encryption at rest Yes

Data is scrambled when stored on their servers

Data jurisdiction United Kingdom (OpenStreetMap Foundation registered in the UK). Tile servers distributed globally. Map data itself is open and mirrored worldwide — no single jurisdiction controls it.

Where servers are located — affects which governments can request your data

Security rating Strong

Privacy policy summary

Viewing maps requires no account and no tracking cookies from OSM. Editing requires an account — the Foundation collects email, username, and IP addresses. GPS traces uploaded by contributors are stored. The Foundation's privacy policy strives to balance project needs with user rights. No advertising. No third-party data sharing beyond what's needed to operate the service.

How to protect yourself:

For high-traffic news stories, self-host tiles or use a commercial tile provider (Mapbox, Stadia Maps) rather than hitting OSM's volunteer-funded servers. When embedding maps, note that readers' browsers make requests to tile servers — if privacy is critical, self-host. Use uMap for quick embeddable maps without coding. For sensitive geographic reporting (conflict zones, source locations), be careful about what you publish — OSM data is public and editable, and map markers in your stories can reveal locations you may not intend to disclose. Verify OSM data against official sources for accuracy-critical reporting — community-maintained data can contain errors or vandalism.

No user tracking, no advertising, no data monetization. Viewing maps requires no account. The data is open and mirrored globally — no single point of control. The Foundation's privacy policy is minimal by design because minimal data is collected. The main considerations are practical: verify community-maintained data for accuracy, self-host tiles for high-traffic embeds, and be careful about publishing sensitive geographic coordinates. Infrastructure security is adequate for a nonprofit — encryption in transit and at rest, distributed tile servers.

Who Owns This

Owner OpenStreetMap Foundation (OSMF), a UK nonprofit (not-for-profit company limited by guarantee). Established 2006. Board elected by members. The Foundation stewards infrastructure but does not own or control the map data — the community does under ODbL.
Funding Donations from individuals and organizations. Corporate supporters include Mapbox, Meta, Microsoft, Apple, Amazon, and others who use OSM data commercially. The Foundation's budget covers servers, one SRE, and the annual State of the Map conference. Tile serving is donation-funded.
Business model OpenStreetMap is free. The Foundation does not sell the data. Commercial companies (Mapbox, TomTom, Apple Maps) build products on OSM data and contribute back through corporate sponsorship, code contributions, and data improvements. The ecosystem is sustained by the value companies extract from open data, not by monetizing users.

Known issues

Data quality varies by region: Urban areas in North America and Europe have excellent coverage. Rural areas, developing countries, and rapidly changing environments may have outdated or incomplete data. Always verify against official sources for accuracy-critical reporting. Vandalism: As with any wiki, OSM data can be vandalized. Edits are tracked and reversible, but false data can persist until caught. Newsrooms should not treat OSM as authoritative without verification for sensitive stories. Tile usage policy: OSM's tile servers are funded by donations and intended for light use. Newsrooms with high-traffic stories that embed OSM tiles directly may be blocked for excessive usage. Use a commercial provider or self-host for production. No Street View equivalent: OSM has no first-party street-level imagery. Third-party projects (Mapillary, KartaView) provide crowd-sourced street photos but coverage is inconsistent. Overpass API complexity: Querying raw OSM data requires learning the Overpass query language, which has a steep learning curve. Tools like Overpass Turbo provide a visual interface but still require geographic data literacy. Attribution required: ODbL requires crediting "OpenStreetMap contributors" on any published map. Failure to attribute is a license violation. Most newsroom map tools handle this automatically, but check your embeds.

Pricing

Free. Map data is open under the Open Data Commons Open Database License (ODbL). Map tiles served free by the OpenStreetMap Foundation for light use. High-volume newsrooms should use a commercial tile provider (Mapbox, Stadia Maps, Thunderforest) or self-host.

This is an editorial assessment based on publicly available information as of 2026-04-03, using our published methodology. Independent security review is pending. Security posture can change at any time. This is not a guarantee of safety.

Something wrong or outdated? Report it.