I ma using google maps in my app, and use the URL as following format without the API key- values,
This is relevant again now that Google just recently deprecated Browser Keys for its Web Services APIs.
Here are the current definitions:
Server keys
Create and use a server key if your application runs on a server. Do not use this key outside of your server code. For example, do not embed it in a web page. To prevent quota theft, restrict your key so that requests are only allowed from your servers' source IP addresses.
Browser keys
Create and use a browser key if your application runs on a client, such as a web browser. To prevent your key from being used on unauthorized sites, only allow referrals from domains you administer.
(from https://developers.google.com/console/help/new/)