| A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | |||||||||||||||||
2 | VPN App Store Privacy Labels Investigation | ||||||||||||||||
3 | Author: Simon Migliano | ||||||||||||||||
4 | VPN Privacy Labels report | ||||||||||||||||
5 | Top10VPN.com | ||||||||||||||||
6 | |||||||||||||||||
7 | |||||||||||||||||
8 | App Name | App ID | Store Listing (Archive URL) | Publisher | Downloads (Global, Feb) | Downloads (Global, Mar) | Downloads (Global, Feb-Mar) | Data Not Linked To You | Accurate? | Data Linked To You | Accurate? | Data Used To Track You | Accurate? | No Data Collected | Accurate? | Privacy Policy Notes and Test Findings | Privacy Policy (Archive URL) |
9 | 1.1.1.1 | 1423538627 | https://web.archive.org/web/20210319160145/https://apps.apple.com/US/app/id1423538627?l=en | Cloudflare | 600,000 | 400,000 | 1,000,000 | Analytics * Usage Data: Product Interaction * Diagnostics: Other Diagnostic Data App Functionality * Usage Data: Product Interaction * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Yes | No label | Not Accurate - Collects source IP, source port and destination IP and stores for 24 hours. This should be listed as Browsing History. | No label | Yes | No label | N/A | From the privacy policy: Account information is collected upon creation, however it is all pseudonymised. Extremely personal information like DNS requests is collected too, but is completely disconnected from your account with no way to be traced back to it. *There are three categories of data that we collect: Account Data, Operational Data, and DNS Resolver Information as described more fully below. Your Account Data and Operational Data are pseudonymized. Your DNS Resolver Information is anonymized at our edge data centers. *We do not collect your name, phone number, or credit card information (or records of any payments collected by the applicable App Store). Request data (Source IP, Source Port, Destination IP): The Application is not designed to hide your identity from the Internet properties you access from your device. As a result, we may retain your request data when you use WARP™ and WARP+™ for a period of 24 hours for emergency purposes, such as responding to emergency law enforcement requests. | https://web.archive.org/web/20210323102852/https://www.cloudflare.com/application/privacypolicy/ |
10 | Atlas VPN | 1492044252 | https://web.archive.org/web/20210317110820/https://apps.apple.com/AU/app/id1492044252 | Atlas VPN | 70,000 | 90,000 | 160,000 | App Functionality * Diagnostics: Crash Data | Yes | Devleoper's Adveristing or Marketing * Identifiers: Device ID Analytics * Identifiers: User ID & Device ID * Usage Data: Product Interaction App Functionality * Contact Info: Email Address * Identifiers: User ID * Usage Data: Product Interaction | Not Accurate - Collects coarse location data | Identifiers: Device ID | Yes | No label | N/A | From the privacy policy: * Basic device data. Such as device type, model, brand name (e.g. Samsung, Apple), OS version, device ID, language, time zone, coarse location (city scale)." * We have implemented various information security measures, including SSL/TLS encryption for data transfers, hashed passwords, firewalls, and regular audits. We take all steps reasonably necessary to ensure that your data is treated securely. | http://web.archive.org/web/20210325113939/https://atlasvpn.com/privacy-policy/ |
11 | Betternet | 946659216 | https://web.archive.org/web/20210317091537if_/https://apps.apple.com/us/app/best-vpn-proxy-betternet/id946659216 | Betternet LLC | 300,000 | 400,000 | 700,000 | Third-party Advertising * Identifiers: Device ID Developer’s Advertising or Marketing * Contact Info: Email Address * Identifiers: Device ID Analytics * Purchases: Purchase History * Location: Coarse Location * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data Product Personalization * Purchases: Purchase History * Location: Coarse Location * Usage Data: Product Interaction App Functionality * Purchases: Purchase History * Location: Coarse Location * Contact Info: Email Address * User Content: Customer Support, Other User Content * Identifiers: User ID, Device ID * Diagnostics: Crash Data | Not Accurate - Contact Info, User ID, Purchase History is linked to a user. No anonymization methods mentioned in PP. - Device ID is collected by Google and there is no mention of hashing (which Betternet does when they collect it directly), hence it's linked to the user. | No label | Not Accurate - Contact Info is typically linked to a user. No anonymization methods mentioned in PP. - User ID (as above) - Device ID is collected by Google (Betternet collects it too but hashes it). | Identifiers - Device ID | Yes | No label | N/A | From the privacy policy: * While we log what domain names that users visit (but not full URLs), we do not log them in combination with anything that identifies an individual or device. * Personalization is conducted by our ad partner Google, who collects personal data such as your user-resettable advertising identifier (e.g. AAID or IDFA) and combines it with information they have to show you ads which they believe are more relevant to you. * device hashes, which are used to identify devices and associate them with other data we collect (such as for measuring bandwidth use, providing support, understanding how you interact with our VPN, and other analytics and marketing purposes). Device hashes are not linked to VPN browsing activity. We use devices hashes because we do not require users to register an account to use some of our products and need a way to distinguish between different users and carry out the activities above. * IP addresses for fraud protection / non-identifiable info such as coarse location, ISP, ad attribution * Google Ads may collect information through their SDKs, such as your mobile advertising identifier, IP address (this is the public VPN IP address only), and device information, for the purpose of serving you with “personalized” ads. * For billing and payment purposes. We use your information in order to perform billing administration activities and process payments, which are required to fulfill our contractual obligations. Note: IP addess use for fraud protection does not apply for iOS apps as payment taken by Apple. | https://drive.google.com/file/d/1fqBFa4arui4R-hpv9nJnOboBaiaDZdM4/view?usp=sharing |
12 | Encrypt VPN - Secure Servers | 1529587196 | https://web.archive.org/web/20210325142750/https://apps.apple.com/CA/app/id1529587196?l=en | 3mw Consultants | 30,000 | 10,000 | 40,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From the privacy policy: * We collect device-specific information, such as your hardware model, operating system version, unique device identifiers, and mobile network information. This usage data may include such information as the date and time of your login and the IP addresses you visited" * We may collect and disclose personal information, including your usage data, to governmental authorities or agencies, including law enforcement agencies * Real-time analysis of Internet and data traffic including destination websites or IP addresses, originating IP addresses * We may collect and store information (including personal information) locally on your device using mechanisms such as browser web storage (including HTML 5) and application data caches. We may collect and store cookies. Tests show it collects Device Info, including user-set Device Name. Facebook and Unity also collect device info, including mobile carrier from SIM even when mobile data is switched off. | https://drive.google.com/file/d/1hMygUzxgKCGiF7FKw-ljTYB9yxlJZHS3/view?usp=sharing |
13 | ExpressVPN | 886492891 | https://web.archive.org/web/20210317093932/https://apps.apple.com/US/app/id886492891 | ExpressVPN | 600,000 | 500,000 | 1,100,000 | Analytics * Usage Data: Product Interaction App Functionality * Diagnostics: Crash Data, Other Diagnostic Data | Yes | Developer's Advertising or Marketing * Contact Info: Email Address * Identifiers: Device ID App Functionality * Contact Info: Email Address | Yes | No label | Yes | No label | N/A | From the privacy policy: ExpressVPN collects personal information that you provide to us directly through the Site. We require that you provide personal information, such as an email address and payment information, in order to establish an ExpressVPN account, and so that we can email you, collect payments from you, and respond to support queries that you initiate. The specific information collected varies depending on the payment method you choose Note: payment info meets criteria for optional disclosure in Apple Developer Guidelines | https://web.archive.org/web/20210324144652/https://www.expressvpn.com/privacy-policy |
14 | Fast VPN: Private VPN Proxy | 1481555604 | https://web.archive.org/web/20210317110155/https://apps.apple.com/GB/app/id1481555604 | Mobipotato HK Limited | 100,000 | 200,000 | 300,000 | Third-Party Advertising * Purchases: Purchase History * Contact Info: Email Address * User Content: Emails or Text Messages, Customer Support * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data Developer’s Advertising or Marketing Diagnostics: Crash Data Analytics * Purchases: Purchase History * Contact Info: Email Address * User Content: Emails or Text Messages, Customer Support * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data App Functionality * Purchases: Purchase History * Contact Info: Email Address * User Content: Emails or Text Messages, Customer Support * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Not Accurate Email address linked to user User ID, Device ID, purchase history, email/SMS content all inherently linked to a user - no anonymization indicated in PP. Collects coarse location data (lat/long, postcode area, city, country) | No label | Not Accurate Email address linked to user User ID, Device ID, purchase history, email/SMS content all inherently linked to a user - no anonymization indicated in PP. Collects IP address | * Purchases: Purchase History * Contact Info: Email Address * User Content: Emails or Text Messages, Customer Support * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Not Accurate Copy/paste from other label with potentially irrelevant entries, very confusing for users. | No label | N/A | From the privacy policy: * When you register for this application account, the personal registration information you provided according to the requirements of this application; * When you access this application, this application automatically receives and records the following information, including but not limited to your IP address, browser type, language used, date and time of access, software and hardware feature information and other data; * This application obtains user personal data from business partners through legal channels. * You understand and agree that the following information does not apply to this privacy policy: * The relevant information data collected by this application that you publish in this application, including but not limited to participation activities, transaction information and evaluation details; * This application also does not allow any third party to collect, edit, sell, or distribute your personal information for free. Does not clearly align with labels. Testing also shows it collects coarse location data and IP addresses | https://web.archive.org/web/20210323151623/https://www.fastvpn.im/privacy |
15 | FastVPN | 1519420252 | https://web.archive.org/web/20210317101849/https://apps.apple.com/AU/app/id1519420252 | Digitalstalk Private Ltd | 20,000 | 10,000 | 30,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From the privacy policy: * Users can be assured that the Personal Information We may collect, including users’ IP addresses, username, or unique mobile ID is never associated with any online activities you engage in while our VPN is connected. * Some third parties may be able to collect certain information from you independently from us including analytics-tool providers or advertisers. | https://web.archive.org/web/20210408074825/https://sites.google.com/view/iosvpnapp/ |
16 | Fastway VPN | 1529085421 | https://web.archive.org/web/20210317104308/https://apps.apple.com/AU/app/id1529085421 | Juan Shen | 50,000 | 30,000 | 80,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From the privacy policy: * The Service barely records your personal information except your geographic at the city level * Data related to your device information and, app version, connection time stamp, the server and the protocol you connected, total data used, network type and the error report * the server you connected, connection time stamp, network type and the error report (if any) will only exist in our servers for up to 72 hours and then vanish permanently - Advertisers may be able to collect some of your information independently from Fastway VPN. Applovin, Mopub, ironSource, InMobi. Tests show that Facebook collects mobile carrier from SIM card data even when mobile data is switched off | https://drive.google.com/file/d/1QpzWcEmxZDJgezm3oXJaABrP5zQcKKj3/view?usp=sharing |
17 | Flash VPN | 1523497910 | https://web.archive.org/web/20210317110910/https://apps.apple.com/CA/app/id1523497910 | Krishan Kansal | 30,000 | 30,000 | 60,000 | Third-Party Advertising * Location: Precise Location Developer's Advertising or Marketing * Location: Precise Location Analytics * Purchases: Purchase History * Location: Precise Location, Coarse Location Search History Browsing History App Functionality * Location: Precise Location | Not Accurate - Precise Location, Purchase History, Browsing History, Search History are linked to a user unless anonymized. | Third-Party Advertising * Usage Data: Production Interaction, Advertising Data, Other Usage Data Developer's Advertising or Marketing * Usage Data: Advertising Data, Other Usage Data Analytics * Usage Data: Other Usage Data, * Diagnostics: Crash Data, Performance Data | Not Accurate - Prescise location, Purchase History, Browsing History, Search History are linked to a user unless anonymized. | Location: * Precise Location, Coarse Location Search History Browsing History Usage Data *Product Interaction *Advertising Data *Other Usage Data Diagnostics *Crash Data *Performance Data *Other Diagnostic Data | Yes | No label | N/A | From the privacy policy: The APP assigns a unique identifier to you for the service Note: privacy policy does not provide information to explain contents of labels. | https://web.archive.org/web/20210408082224/https://vpn.erhan.md/privacy/ |
18 | Free VPN by Free VPN.org | 1050171910 | https://web.archive.org/web/20210317091910if_/https://apps.apple.com/US/app/id1050171910 | Free VPN LLC | 300,000 | 300,000 | 600,000 | App Functionality * Identifiers: Device ID * Diagnostics: Other Diagnostic Data | Not Accurate - Device ID tied to a user unless anonymized | No label | Not Accurate 3P advertisers collect: - IP Address - Device ID | No label | Not Accurate - Device ID | No label | N/A | Taken from alternate privacy policy on the freevpn.org site "For users who wish to use our product offering for free, we offer an advertising supported version of Free VPN. In this version, users watch ads from our various ad partners, earnings from which are put towards keeping multiple servers running thus ensuring we offer the best possible service to our users. We absolutely DO NOT collect or store any user data on our end. Our aim is to offer a good user experience, maintain your privacy and honor your trust in us. If you wish to learn more about the privacy policy of our ad partners click on their respective links – AdMob, ironSource" From ironSource: "We collect and transfer Ad Network Information to other entities (including our corporate affiliates and non-affiliates such as advertisers, other ad networks, and third parties acting on behalf of these types of entities) that use the information described in this Privacy Policy for serving you with personalized ads." The version from the iOS store includes comparatively less detail, implying ads don't track user information: "we show ads from our ad partners that help pay for the many VPN servers we have and in turn better service to our users. We DO NOT share any information with our ad partners. We respect your privacy and consider it of utmost importance to provide an honest and trustworthy service to our users. " | https://web.archive.org/web/20210324103954/https://freevpn.org/privacy-policy/ |
19 | HMA | 675102189 | https://web.archive.org/web/20210317094705/https://apps.apple.com/US/app/id675102189 | Avast | 50,000 | 40,000 | 90,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From the privacy policy: * Collects "Service Data": day of connection, rounded amount of data transmitted, connection events, application events, crash reports * Account data: email address Analytics data via 3P platforms, inc Firebase and Crashlytics | https://web.archive.org/web/20210326105612/https://www.hidemyass.com/legal/privacy |
20 | Hotspot VPN | 1323486315 | https://web.archive.org/web/20210317101809/https://apps.apple.com/AU/app/id1323486315 | Hotspot VPN Inc | 40,000 | 50,000 | 90,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From the privacy policy: * Collects email, payment details, usage data (server load) and customer support data/ Note: tests showed this VPN leaks DNS requests for all sites visited during VPN session | https://web.archive.org/web/20210408054324/https://www.hotspotvpn.co/best-free-hotspot-vpn-x-vpn-pp |
21 | Hotspot VPN - VPN Proxy Master | 1537345287 | https://web.archive.org/web/20210317104532/https://apps.apple.com/CA/app/id1537345287 | QIANQIAN FAN | 7,000 | 30,000 | 37,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From the privacy policy: * We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned * the type of mobile device you use, your mobile device's unique device ID, the IP address of your mobile device, your mobile operating system, and information about the way you use the applications. * Ad Networks may access your unique device identifier through their own technologies and use it to target advertising to you. Tests show Facebook and Unity both collect device info, including mobile carrier from SIM even when mobile data is switched off | https://drive.google.com/file/d/1WlQg8_wAxWgL68TBhXAA0oCeIEE_JNey/view?usp=sharing |
22 | Hotspot VPN Proxy & AdBlock | 1453812701 | https://web.archive.org/web/20210317103759if_/https://apps.apple.com/GB/app/id1453812701 | Unlimited Proxy Inc | 60,000 | 60,000 | 120,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Yes | From the privacy policy: * Collects email address / payment info Meets criteria for optional disclosure under the Apple Disclosure Guidelines | https://web.archive.org/web/20210323163617/https://www.unlimitedproxy.io/best-free-hotspot-vpn-x-vpn-pp |
23 | HotspotShield VPN | 443369807 | https://web.archive.org/web/20210317090934if_/https://apps.apple.com/US/app/id443369807?l=en | AnchorFree Inc | 300,000 | 300,000 | 600,000 | Developer’s Advertising or Marketing * Contact Info: Email Address * Identifiers: Device ID Analytics * Purchases: Purchase History * Location: Coarse Location * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data * Diagnostics: Performance Data, Other Diagnostic Data Product Personalization * Purchases: Purchase History * Location: Precise Location, Coarse Location * Usage Data: Product Interaction, Advertising Data App Functionality * Purchases: Purchase History * Location: Precise Location, Coarse Location * Contact Info: Email Address * User Content: Customer Support, Other User Content * Identifiers: User ID, Device ID * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Not Accurate - Contact Info is typically linked to a user. No anonymization methods mentioned in PP. - User ID (as above) - Purchase history - this is billing info, which is inherently linked to a user. | No label | Not Accurate - Contact Info is typically linked to a user. No anonymization methods mentioned in PP. - User ID (as above) - Device ID is collected by Google (HSS collects it too but hashes it). | Identifiers - Device ID | Yes | No label | N/A | From the privacy policy: * While we log what domain names that users visit (but not full URLs), we do not log them in combination with anything that identifies an individual or device. * Personalization is conducted by our ad partner Google, who collects personal data such as your user-resettable advertising identifier (e.g. AAID or IDFA) and combines it with information they have to show you ads which they believe are more relevant to you. * device hashes, which are used to identify devices and associate them with other data we collect (such as for measuring bandwidth use, providing support, understanding how you interact with our VPN, and other analytics and marketing purposes). Device hashes are not linked to VPN browsing activity. We use devices hashes because we do not require users to register an account to use some of our products and need a way to distinguish between different users and carry out the activities above. * IP addresses for fraud protection / non-identifiable info such as coarse location, ISP, ad attribution * Google Ads may collect information through their SDKs, such as your mobile advertising identifier, IP address (this is the public VPN IP address only), and device information, for the purpose of serving you with “personalized” ads. * For billing and payment purposes. We use your information in order to perform billing administration activities and process payments, which are required to fulfill our contractual obligations. Note: IP addess use for fraud protection does not apply for iOS apps as payment taken by Apple. | https://drive.google.com/file/d/1fqBFa4arui4R-hpv9nJnOboBaiaDZdM4/view?usp=sharing https://drive.google.com/file/d/1ca1Qr-sekVIH_4tkOxbzVSzmxRglV-3Q/view?usp=sharing |
24 | Larva VPN | 1456359623 | https://web.archive.org/web/20210317103103/https://apps.apple.com/GB/app/id1456359623 | Unikel | 40,000 | 40,000 | 80,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From privacy policy: * When you open the Mobile Application our servers automatically receive information that your device sends. This data may include information such as your device's IP address, app version, operating system type and version. * We receive and store any information you knowingly provide to us when you fill any online forms or email us in the Mobile Application. * Emails/Support Forms - Stored in order to resolve support requests or feedback. | https://web.archive.org/web/20210319095731/https://larva.app/privacy.html |
25 | Nolog VPN - Fast Stable Proxy | 1516805757 | https://web.archive.org/web/20210317104123/https://apps.apple.com/AU/app/id1516805757 | Bitmorpher Ltd | 200,000 | 200,000 | 400,000 | No label | N/A NB: As of 07/04/21 now updated to show label: Analytics * Purchases: Purchase History * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Diagnostics, Crash Data Still not accurate as user ID, Device ID and purchase history are linked to a user unless anonymized | No label | N/A NB: As of 07/04/21 now updated to show labels but no label for Data Linked To You. Still not accurate as user ID, Device ID and purchase history are linked to a user unless anonymized | No label | N/A NB: As of 07/04/21 now updated to show label: * Identifiers: User ID, Device ID | Label present | Not Accurate | Collects: Apps and app versions successfully activated, Dates (not times) of VPN connections, VPN server location, daily bandwidth usage (MB). Customer service information: stores inquiries and communications with users through the Contact Us and Community Area pages. Device info including model, OS type and version, unique identifiers, language. Analytics and crash data via Firebase. Facebook Analytics for Apps (Facebook, Inc.) - Facebook Analytics for Apps is an analytics service provided by Facebook, Inc. - Personal Data collected: Usage Data; various types of Data as specified in the privacy policy of the service. Privacy policy updated on March 24 to correct outdated app name references and add new summary sections. No material changes appear to have been made. | https://web.archive.org/web/20210319113148/https://sites.google.com/view/mobisec/privacy-policy |
26 | NordVPN | 905953485 | https://web.archive.org/web/20210317092942if_/https://apps.apple.com/US/app/id905953485 | NordVPN S.A. (previously Tefincom S.A.) | 600,000 | 600,000 | 1,200,000 | Developer’s Advertising or Marketing * Identifiers: User ID, Device ID Analytics * Identifiers: User ID, Device ID * Usage Data: Product Interaction * Diagnostics: Performance Data App Functionality * Contact Info: Email Address * Identifiers: User ID & Device ID * Usage Data: Product Interaction * Diagnostics: Crash Data, Performance Data | Not Accurate - Device ID, User ID is collected, which is linked to a user unless aggregated and anonymized. - Contact info is linked to a user. Same as above re anonymization | No label | Not Accurate - Device ID, User ID is collected, which is linked to a user unless aggregated and anonymized. - Contact info is linked to a user. Same as above re anonymization | Identifiers: Device ID | Yes | No label | N/A | From the privacy policy: * Email address. We ask for your email address as part of your registration. It is necessary for establishing a Nord account * Country details. When providing your payment details, we ask our users to provide the country where they are registere * Statistical server load information. We monitor server performance (cpu, ram, servers net usage) to recommend the most suitable servers to our customers. * Username and a timestamp of the last session status. This information is used to limit the amount of concurrent active user sessions and is automatically deleted within 15 minutes after a session is terminated. * Device identifiers. In some cases, we may record your mobile device’s identifier for marketing or analytics purposes. | https://web/20210325162819/https://my.nordaccount.com/legal/privacy-policy/ https://web.archive.org/web/20210325171510/https://my.nordaccount.com/legal/privacy-policy/nordvpn/ |
27 | Norton Secure VPN - VPN Proxy | 1095519285 | https://web.archive.org/web/20210317110728/https://apps.apple.com/AU/app/id1095519285 | NortonLifeLock Inc | 400,000 | 300,000 | 700,000 | Third-Party Advertising * Identifiers: User ID * Usage Data: Product Interaction * Diagnostics: Crash Data & Performance Data Developer's Advertising or Marketing * Usage Data: Product Interaction Analytics * Identifiers: User ID * Usage Data: Product Interaction * Diagnostics: Crash Data, Performance Data & Other Diagnostic Data | Not Accurate - Collects IP address, device name, install identifier and license identifier, which are linked to a user | Developer's Advertising or Marketing Contact Info: Email Address & Name Product Personalisation Contact Info: Email Address & Name App Functionality Contact Info: Email Address | Not Accurate - Collects IP address, device name, install identifier and license identifier, which are linked to a user | Identifiers: User ID Usage Data: Product Interaction Diagnostics: Crash Data, Performance Data & Other Diagnostic Data | Yes | No label | N/A | From the privacy policy: * User Data may include: IP Address, Install identifier, License identifier * Administrative Data may include: Device name and type, OS version * "Security Data may include: Aggregate bandwidth usage" | https://web.archive.org/web/20210325171226/https://support.norton.com/sp/en/us/secure-wifi/current/solutions/v6382922 https://web.archive.org/web/20210325171345/https://www.nortonlifelock.com/gb/en/privacy/global-privacy-statement/ |
28 | PlaneVPN | 1471511787 | https://web.archive.org/web/20210317102707/https://apps.apple.com/US/app/id1471511787 | SAKURA TECHNOLOGY | 6,000 | 10,000 | 16,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From the privacy policy: * aggregate bandwidth usage * It may become necessary to temporarily maintain usage data to assist in debugging a problem with the service. This usage data may include such information as the date and time of your login and the IP addresses you visited. This personal information is not retained once the troubleshooting is resolved * We may collect and disclose personal information, including your usage data, to governmental authorities or agencies, including law enforcement agencies, at their request or pursuant to a court order, subpoena or other legal process, if there is a good faith belief that such collection or disclosure is required by law; * we ... collect your email address. We may also use your email address for billing and customer support. From time to time we may use your email address to request your feedback on our service, advise you of promotional offers regarding our current and new services and provide you with updates on our new products and product features. | https://web.archive.org/web/20210318155427/https://woshuo123.wordpress.com/2019/07/15/privacy-policy/ https://web.archive.org/web/20210318155301/https://woshuo123.wordpress.com/ |
29 | Psiphon | 1276263909 | https://web.archive.org/web/20210317092052/https://apps.apple.com/US/app/id1276263909 | Psiphon | 200,000 | 100,000 | 300,000 | Third-Party Advertising * Diagnostics: Crash Data Analytics * Diagnostics: Crash Data Other Purposes * Diagnostics: Other Diagnostic Data | Yes | Third-Party Advertising * Location: Coarse Location * Identifiers: Device ID * Usage Data: Product Interaction, Advertising Data * Diagnostics: Performance Data Developer’s Advertising or Marketing * Location: Coarse Location Analytics * Location: Coarse Location * Identifiers: Device ID * Usage Data: Product Interaction, Advertising Data * Diagnostics: Performance Data | Yes | * Location: Coarse Location * Identifiers: Device ID, Usage Data * Product Interaction: Advertising Data * Diagnostics: Crash Data, Performance Data | Not Accurate 3P Ogury collects user's email address | No label | N/A | From 3P Ogury PP The User's email address & other identifiers linked to the Device (Ogury collects this information only where a User’s Device allows it through the Publisher Apps in order to derive insights such as gender and then we anonymise the identifier after 3 days). From 3P Applovin PP: We may also combine information we collect with other information we derive through analytical techniques, and we use that combined information to offer the Services. This type of information may include transactional data related to a consumer’s interaction with an application, such as information about the actions taken in an application like purchases | https://web.archive.org/web/20210324142710/https://psiphon.ca/en/privacy.html |
30 | SafeVPN | 1525332381 | https://web.archive.org/web/20210317095334/https://apps.apple.com/GB/app/id1525332381 | Disu International | 30,000 | 40,000 | 70,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From the privacy policy: Uses 3P services: Google Play Services, AdMob We want to inform you that whenever you use our Service, in a case of an error in the app we collect data and information (through third party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics. | https://drive.google.com/file/d/1GpQ8ULLdMCUcuNwuN5RobuIxugKxAbj-/view?usp=sharing |
31 | SecureVPN | 1522664954 | https://web.archive.org/web/20210317102429/https://apps.apple.com/CA/app/id1522664954 | Approtic | 5,000 | 10,000 | 15,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From the privacy policy: * Third-parties may be involved in processing of information for payments, websites or mobile app analytics. * Data from Website Forms, Emails, Support Tickets, and Live Chats. In some situations users may voluntarily choose to share their personal information with us. | https://web.archive.org/web/20210408131235/https://sites.google.com/view/secure-vpnios/home |
32 | Speedy VPN | 1495277812 | https://web.archive.org/web/20210317104749/https://apps.apple.com/CA/app/id1495277812 | Hefei Single Machine Placement Technology | 60,000 | 100,000 | 160,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From the privacy policy: * The data we collect is based on your interactions with us and your choices, including your privacy settings and the products and features you use. * The data we collect includes: application version number, application identifier, application version, application developer identifier, etc. Tests show it collects device info. Facebook and Unity also collect device info, including mobile carrier from SIM even when mobile data is switched off | https://drive.google.com/file/d/1TdaQQDHUhnoaY-IZHyZSNbnT-xoc74Ws/view?usp=sharing |
33 | Super VPN UK | 1497442844 | https://web.archive.org/web/20210317103115/https://apps.apple.com/gb/app/super-vpn-uk-x-free-unlimited/id1497442844 | Best VPN Inc | 10,000 | 10,000 | 20,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From the privacy policy: * Collects: email address, payment data. * Also collects server load information, customer service information. | https://web.archive.org/web/20210324152810/https://www.best-vpn.co/best-free-hotspot-vpn-x-vpn-pp |
34 | SuperVPN | 1498737447 | https://web.archive.org/web/20210317110911/https://apps.apple.com/CA/app/id1498737447 | NOWNETMOBI | 30,000 | 50,000 | 80,000 | Third Party Advertising * Identifiers: Device ID * Usage Data: Advertising Data Analytics * Usage Data: Product Interaction App Functionality * User ID | Not Accurate - Device ID and User ID are data linked to a user - Coarse location | No label | Not Accurate - Device ID and User ID are data linked to a user | Third-Party Advertising Identifiers: Device ID | Not Accurate Trackers from advertisers also have access to usage data | No label | N/A | From the privacy policy: * Personal information: The Service barely records your personal information except your geographic at the city level (please note that additional information may be collected if you contact us). * Non-personal information: (i) Data related to your device information and, app version, connection time stamp, the server and the protocol you connected, total data used, network type and the error report (if any) will be automatically collected when you visit or use the Service. (ii) Analysis of our servers, which is non-identifying, like the analysis of the sites visited through the Service. This is a mixed big data from all our users. * Advertisers may be able to collect some of your information independently from Super VPN: Applovin, Mopub, ironSource, InMobi. Tests show that persistent iOS unique user ID (UUID) is collected. | https://web.archive.org/web/20210324153444if_/https://www.supervpn.im/privacy |
35 | Turbo VPN | 1365309175 | https://web.archive.org/web/20210317093938/https://apps.apple.com/US/app/id1365309175 | INNOVATIVE CONNECTING PTE.LIMITED | 400,000 | 400,000 | 800,000 | Third Party Advertising * Identifiers: Device ID * Usage Data: Advertising Data Developer’s Advertising or Marketing Identifiers: Device ID Analytics * Identifiers: Device ID * Usage Data: Product Interaction, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data Product Personalization * Identifiers: Device ID App Funtionality * User Content: Customer Support * Identifiers: Device ID * Diagnostics: Crash Data * Performance Data: Other Diagnostic Data | Not Accurate - Device ID is linked to user - Country of origin - ISP collected | Contact Info: Email address | Not Accurate - IP address - lat/long data | * Identifiers: Device ID * Usage Data: Advertising Data | Yes | No label | N/A | From the privacy policy: * the APP assigns a unique identifier to you for the service" * We collect information regarding the total sum of data transferred by a given user. * We collect information related to which Apps and Apps version(s) you have activated. *We collect information about whether a VPN connection is successful on a particular day [...] to which VPN location [...] and from which country/ISP * The Size (in MB) of Data transferred * we collect minimal usage statistics and anonymized analytics data * advertising partners may set and access their own cookies, pixel tags, and similar technologies on our services, and they may otherwise collect or have access to information about you which they may collect over time and across different online services. Testing shows collection of IP address and location data | https://web.archive.org/web/20210409062933/https://turbovpn.com/static/privacy_policy_ios.html |
36 | UFO VPN | 1436251125 | https://web.archive.org/web/20210317110715/https://apps.apple.com/AU/app/id1436251125 | Dreamfii HK Ltd | 60,000 | 80,000 | 140,000 | Third-Party Advertising * Identifiers: Device ID * Usage Data: Advertising Data * Diagnostics: Performance Data Analytics * Usage Data: Product Interaction App Functionality * Purchases: Purchase History * Identifiers: User ID * Diagnostics: Crash Data | Not Accurate - User ID, Device ID, purchase history linked to user unless anonymize | No label | Not Accurate - User ID, Device ID, purchase history linked to user unless anonymized - mobile carrier from SIM card - Customer service info | Identifiers: Device ID | Yes | No label | N/A | From the privacy policy: * When you submit support requests or bug reports, we will collect the data that you choose to share with us about the issue being reported. * Stores email and payment info but appear to meet criteria for optional disclosure under ADG. Tests reveal collection of mobile carrier name from SIM even when mobile data is switched off | https://web.archive.org/web/20210325160430/https://ufovpn.io/privacy |
37 | VPN - Fast Proxy Master Shield | 1523608667 | https://web.archive.org/web/20210317094316/https://apps.apple.com/GB/app/id1523608667 | Digitalbird | 10,000 | 20,000 | 30,000 | Third-Party Advertising * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data Analytics * Purchases: Purchase History * User Content: Customer Support, * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data App Functionality * Purchases: Purchase History * User Content:, Customer Support * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Not Accurate - User ID, Device ID, Purchase history linked to a user, no anonymization indicated in PP. | No label | Not Accurate - User ID, Device ID, Purchase history linked to a user, no anonymization indicated in PP. - IP address collected by FB | * Purchases: Purchase History * User Content: Customer Support * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Yes | No label | N/A | From the privacy policy: * Non-personal information: (i) Data related to your device information and, app version, connection time stamp, the server and the protocol you connected, total data used, network type and the error report (if any) will be automatically collected when you visit or use the Service. (ii) Analysis of our servers, which is non-identifying, like the analysis of the sites visited through the Service. This is a mixed big data from all our users. * Geo data (city level) mainly used to analyze our product distribution and for product planning. Non-personal information is mainly used for the Service's optimization * As to the storing period, the server you connected, connection time stamp, network type and the error report (if any) will only exist in our servers for up to 72 hours and then vanish permanently. * Advertisers may be able to collect some of your information independently... * Four other 3P privacy policies are listed, which go into greater detail regarding Purchase History. e.g. the AppLovin privacy policy states: "This type of information may include transactional data related to a consumer’s interaction with an application, such as information about the actions taken in an application like purchases or application installations" Tests show Facebook collects IP address | https://drive.google.com/file/d/1-caOl35_569Vb10LifuaChJSilDjOUqf/view?usp=sharing |
38 | VPN - Secure VPN Proxy App | 1494996252 | https://web.archive.org/web/20210317095226/https://apps.apple.com/GB/app/id1494996252 | Meditation Calming Sleep Workout | 20,000 | 20,000 | 40,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From the privacy policy: * There are two basic categories of Personal Information we collect: - Personal Information you choose to give us; - Personal Information we automatically collect When you use our Services * You can be assured that the Personal Information We may collect, including your email, IP address, username, or unique mobile ID is never associated with any online activities you engage in while the VPN Mask [sic] is connected. | https://web.archive.org/web/20210407093038/https://vvpn.io/privacy.html |
39 | VPN - Super Fast Secure Proxy | 1531062002 | https://web.archive.org/web/20210317110609/https://apps.apple.com/AU/app/id1531062002 | Snail Inc | 100,000 | 200,000 | 300,000 | Third-Party Advertising * Identifiers: Device ID * Usage Data: Advertising Data, Other Usage Data Analytics * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data App Functionality * User Content: Photos or Videos * Identifiers: Device ID * Usage Data: Product Interaction | Not Accurate - Device ID is linked to user unless anonymized. - No explanation of collection of photos/videos in PP. | App Functionality * Purchases: Purchase History * Identifiers: User ID | Not Accurate - collects email address | Identifiers: Device ID | Yes | No label | N/A | From the privacy policy: * Collects email address for password resets, marketing, notifications * We may use your information when analyzing user data with third-party platform tools Tests show Google collects device information | https://web.archive.org/web/20210323165049/https://snailvpn.com/privacy?language=EN |
40 | VPN - Super Unlimited Proxy | 1370293473 | https://web.archive.org/web/20210302151540/https://apps.apple.com/US/app/id1370293473?l=en | Mobile Jump Pte Ltd | 800,000 | 1,000,000 | 1,800,000 | Third-party Advertising * Identifiers: Device ID Analytics * Location: Coarse Location * Identifiers: Device ID App Functionality * User Content: Customer Support * Usage Data: Other Usage Data * Diagnostics: Other Diagnostic Data | Not Accurate - Location should be Fine (due to GPS) | No label | Not Accurate - Missing account info/billing & payment/ID verification - Shared with 3P ad networks: mobile advertising identifier, IP address, and device info. - Fine location data collected | No label | Not Accurate - Shared with 3P ad networks: mobile advertising identifier, IP address, and device info. | No label | N/A | From the privacy policy: * Account Info - name, username, email, pw) * Billing and payment info - billing name, billing contact details (street addresses, email addresses), and payment instrument details * Identity verification info - email * Communications and submissions - support etc * Usage Data (bandwidth, session duration) * Device Info (device identifiers, browser types, device types and settings, operating system versions, mobile, wireless, and other network information (such as internet service provider name, carrier name and signal strength), and application version numbers. * Diagnostic info - what is being requested, information about the device and app used to make the request, timestamps, and referring URLs * Location - GPS or lat/long from IP * 3Ps place tracking technologies in our services... To help us market and advertise our services to you, including on third party websites... deliver ad retargeting. | https://web.archive.org/web/20210227162017/https://www.mobilejump.mobi/about/privacy.html |
41 | VPN - Unlimited Best VPN Proxy | 1282216562 | https://web.archive.org/web/20210317094637if_/https://apps.apple.com/US/app/id1282216562 | Mobile Jump Pte Ltd | 100,000 | 80,000 | 180,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From the privacy policy: * Account Info - name, username, email, pw) * Billing and payment info - billing name, billing contact details (street addresses, email addresses), and payment instrument details * Identity verification info - email * Communications and submissions - support etc * Usage Data (bandwidth, session duration) * Device Info (device identifiers, browser types, device types and settings, operating system versions, mobile, wireless, and other network information (such as internet service provider name, carrier name and signal strength), and application version numbers. * Diagnostic info - what is being requested, information about the device and app used to make the request, timestamps, and referring URLs * Location - GPS or lat/long from IP | https://web.archive.org/web/20210317180343/https://www.mobilejump.mobi/about/privacy.html |
42 | VPN · · | 1465229429 | https://web.archive.org/web/20210317094853/https://apps.apple.com/US/app/id1465229429 | VPN VPN VPN Proxy Master Unlimited Inc | 50,000 | 50,000 | 100,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From privacy policy: * We only store your email address. States that it collects no other data at all. Tests reveal however that it passes data to FB. - device info, identifiers Also passes following to RevenueCat (3P subscription management): - real IP address | https://web.archive.org/web/20210322161421/https://vpnmasterpro.com/tos/ |
43 | VPN 360 | 1193154948 | https://web.archive.org/web/20210317092348/https://apps.apple.com/US/app/id1193154948 | TouchVPN | 300,000 | 300,000 | 600,000 | Developer's Advertising or Marketing * Contact Info: Email Address * Identifiers: Device ID Analytics * Purchases: Purchase History * Location: Coarse Location * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data * Diagnostics: Performance Data, Other Diagnostic Data Product Personalisation * Purchases: Purchase History * Location: Coarse Location * User Data: Product Interaction, Advertising Data App Functionality * Purchases: Purchase History * Location: Coarse Location * Contact Info: Email Address * User Content: Customer Support, Other User Content * Identifiers: User ID, Device ID * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Not Accurate - Contact Info is typically linked to a user. No anonymization methods mentioned in PP. - User ID (as above) - Purchase history - this is billing info, which is inherently linked to a user. | No label | Not Accurate - Contact Info is typically linked to a user. No anonymization methods mentioned in PP. - User ID (as above) - Device ID is collected by Google (VPN 360 collects it too but hashes it). Even if they don't collect it directly, VPN 360 facilitates its collection. | Identifiers: Device ID | Yes | No label | N/A | From the privacy policy: - Usage information: such as how often you use our services, how much bandwidth you use, and when and for how long you use our services. - Device information: including about the browsers and Aura apps you use to access our services. For example, we may collect device identifiers, browser types, device types and settings, operating system versions, mobile, wireless, and other network information (such as internet service provider name, carrier name and signal strength), and application version numbers. - Diagnostic information. We may collect information about the nature of the requests that you make to our servers (such as what is being requested, information about the device and app used to make the request, timestamps, and referring URLs). However, our VPN products do not log any information that associates your identity with your VPN browsing activity. We do not maintain any records that show what you were browsing or accessing through a VPN connection. - We may use your information to provide, measure, personalize, and enhance our advertising and marketing based on our legitimate interest in offering you services that may be of interest. | https://web.archive.org/web/20210324143401/https://aura.com/legal/privacy-policy?vh=extd71cfa30-77c3-11ea-b62a-67431c1b7647 |
44 | VPN Booster | 1537346983 | https://web.archive.org/web/20210317104245/https://apps.apple.com/AU/app/id1537346983 | Chengdu Xingchen Primary Network Technology | 50,000 | 60,000 | 110,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From the privacy policy: * Logs mobile devices' unique device ID, the IP address of your mobile device, your mobile operating system, the list of system applications and currently installed applications, and information about the way you use the Application. | https://web.archive.org/web/20210408065535/https://policy.indiepixel.xyz/privacy.html |
45 | VPN Expert | 1537345606 | https://web.archive.org/web/20210317104448if_/https://apps.apple.com/CA/app/id1537345606 | Chengdu Lanzheng Technology Co., Ltd | 100,000 | 70,000 | 170,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | Privacy policy appears to confirm privacy label however test results contradict this. Tests show VPN collects basic device info and sets a unique user ID, therefore it should have a Data Linked To You label. Facebook also collects mobile carrier from SIM card plus other device info. | https://drive.google.com/file/d/1EBgGfe7cDz7jYSuLAWS6hmcsZEzXboxI/view?usp=sharing |
46 | VPN for iPhone · | 1273734740 | https://web.archive.org/web/20210317110047/https://apps.apple.com/US/app/id1273734740 | Brain Craft | 40,000 | 40,000 | 80,000 | Third-Party Advertising * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data Analytics * Purchases: Purchase History * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Not Accurate - User ID, Device ID are linked to a user - Coarse location derived from IP address, also locale & timezone - Collects/shares mobile carrier (taken from SIM) - Purchase history is linked with a user | No label | Not Accurate - User ID, Device ID are linked to a user - Collects IP adress - Purchase history is linked with a user | Identifiers: User ID, Device ID | Yes | No label | N/A | From privacy policy: * Google Ads SDK may collect IP address, which may be used to estimate the general location of a device. * VPN uses “Nord VPN” platform for VPN servers. All the data collected may also be stored by “Nord VPN”. Please Check: https://nordvpn.com/privacy-policy/ and https://nordvpn.com/terms-of-service/ * 5 further 3P PPs apply: Firebase, Facebook SDK, AppsFlyer, Qonversion, OpenSSL Tests show that it shares device telemetry with 3Ps | https://web.archive.org/web/20210323124342/https://braincraftapps.com/workspace/vpn/Policy.html |
47 | VPN for iPhone Hotspot x Proxy | 1508654384 | https://web.archive.org/web/20210317105657/https://apps.apple.com/CA/app/id1508654384 | Be Yourself Inc | 20,000 | 10,000 | 30,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Yes | From the privacy policy: * collects email address / payment info This data collection appears to meet the criteria for optional non-disclosure under the Apple Developer Guidelines. | https://web.archive.org/web/20210408181016/https://www.better-life.io/best-free-hotspot-vpn-x-vpn-pp |
48 | VPN Force | 1533628002 | https://web.archive.org/web/20210317091844/https://apps.apple.com/US/app/id1533628002 | Social Force Limited | 40,000 | 50,000 | 90,000 | Third-party Advertising * Identifiers: Device ID * Usage Data: Advertising Data Analytics * Identifiers: Device ID * Usage Data: Product Interaction * Diagnostics: Crash Data App Functionality * Purchases: Purchase History * User Content: Customer Support * Identifiers: User ID * Diagnostics: Crash Data Other Purposes * Diagnostics: Other Diagnostic Data | Not Accurate * User ID is linked to a user/account. No anonymization methods mentioned in PP. * Device ID is linked to a user. No anonymization methods mentioned in PP. * Purchase history is linked to a user. | No label | Not Accurate * User ID is typically linked to a user. No anonymization methods mentioned in PP. * Device ID is linked to a user. No anonymization methods mentioned in PP. * Purchase history is linked to a user. | Identifiers: Device ID | Yes | No label | N/A | * User ID is requested such as screen name, handle, account ID, assigned user ID, customer number, or other user- or account-level ID that can be used to identify a particular user or account. * Device ID is requested such as the device's advertising identifier, or other device-level ID. * Purchase History. An account's or individual's purchases are requested. * We use the information we collect or receive: - To send you marketing and promotional communications. We and/or our third party marketing partners may use the personal information you send to us for our marketing purposes. - Deliver targeted advertising to you. We may use your information to develop and display content and advertising (and work with third parties who do so) tailored to your interests and/or location and to measure its effectiveness. | https://web.archive.org/web/20210317180739/https://www.freevpnforce.com/privacy-policy |
49 | VPN iTop | 1538546081 | https://web.archive.org/web/20210317112301/https://apps.apple.com/CA/app/id1538546081 | Orange View | 30,000 | 20,000 | 50,000 | App Functionality * Diagnostics: Crash Data | Yes | App Functionality * Purchases: Purchase History * Financial Info: Payment Info * Contact Info: Email Address * User Content: Emails or Text Messages, Customer Support * Identifiers: Device ID * Diagnostics: Other Diagnostic Data | Yes | No label | Yes | No label | N/A | From the privacy policy: * We do not log your activity while you are utilizing the Services, including your browsing history, the bandwidth you used, or how long you connected to VPN servers. We do not store your original IP address or the server IP address that you connect to. * When you purchase our products or services, the billing is handled by a third-party service provider, who is acting on our behalf; thus, you will make your purchase from the service provider directly, and not from iTop VPN. The handling of your personal information will be governed by any privacy policy or terms of service published by the service provider. Tests show that Facebook collects mobile carrier from SIM even when mobile data is switched off | https://web.archive.org/web/20210324153339if_/https://www.itopvpn.com/privacy |
50 | VPN Proxy Best Secure Hotspot | 1523218506 | https://web.archive.org/web/20210317103732if_/https://apps.apple.com/GB/app/id1523218506 | VPN Proxy Inc | 40,000 | 60,000 | 100,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Yes | From the privacy policy: * Valid email address is also needed to retrieve a lost password and to make a VPN connection. * Customer service information. VPN Proxy.com stores inquiries and communications with users through the Contact Us and Community Area pages. Meets the criteria for optional disclosure under the Apple Developer Guidelines | http://web.archive.org/web/20210325115420/https://www.vpnproxy.io/best-free-hotspot-vpn-x-vpn-pp |
51 | VPN Proxy Master | 1025707485 | https://web.archive.org/web/20210317093952/https://apps.apple.com/US/app/id1025707485 | ALL Connected | 400,000 | 600,000 | 1,000,000 | Third-Party Advertising * Identifiers: Device ID * Usage Data: Advertising Data Developer's Advertising or Marketing * Identifiers: Device ID * Usage Data: Advertising Data Analytics * Location: Coarse Location * Identifiers: Device ID * Usage Data: Production Interaction, Other Usage Data Diagnostics: Crash Data, Performance Data, Other Diagnostic Data Product Personalizations * Location: Coarse Location * Identifiers: Device ID * Usage Data: Product Interaction, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data App Functionality * Location: Coarse Location * Contact Info: Email Address * User Content: Customer Support * Identifiers: Device ID * Usage Data: Production Interaction, Other Usage Data * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Not Accurate Collects: * Device ID (linked to user) * Email address (linked to user) | No label | Not Accurate * Device ID * Email address | Identifiers: Device ID Usage Data: Advertising Data | Yes | No label | N/A | See notes from almost identical TurboVPN privacy policy above. Also, We keep records of any correspondence, questions, complaints, or compliments you submit to us, along with our response. Depending on how you contact us, we may collect your email address and any additional information you provide to us. Having full correspondence records enables us to provide the best possible customer support experience. We use emails for support correspondence: vpnmaster@inconnecting.com. When you correspond with us using these emails, your correspondence records, including your name and email address, are stored in their systems Email collection does not appear to fall under optional disclosure exception as not directly supplied in-app | https://web.archive.org/web/20201024202258/https://vpnproxymaster.com/static/privacy_policy.html |
52 | VPN Proxy Private Browser 360 | 1402980464 | https://web.archive.org/web/20210317094937/https://apps.apple.com/GB/app/id1402980464 | Free VPN Inc | 30,000 | 20,000 | 50,000 | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | NO DETAILS PROVIDED | N/A | No Details Provided | N/A | From the privacy policy: * Collects email and payment data, customer support data. * Unclear regarding level of VPN connection metadata collected | https://web.archive.org/web/20210407070109/https://www.freevpn247.com/pp |
53 | VPN Super Star x Proxy Hotspot | 1498370316 | https://web.archive.org/web/20210317104744/https://apps.apple.com/CA/app/id1498370316 | Free VPN Inc | 10,000 | 5,000 | 15,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Yes | From the privacy policy: * collects email address / payment info This data collection appears to meet the criteria for optional non-disclosure under the Apple Developer Guidelines. | https://web.archive.org/web/20210325120316/https://www.freevpn247.com/pp |
54 | VPN Unlimited | 694633015 | https://web.archive.org/web/20210317110551/https://apps.apple.com/GB/app/id694633015 | KeepSolid Inc | 40,000 | 40,000 | 80,000 | Analytics * Usage Data: Product Interaction * Diagnostics: Other Diagnostic Data Product Personalization * Contact Info: Email Address * Identifiers: User ID App Functionality * Purchases: Purchase History * Location: Coarse Location * Contact Info: Email Address * User Content: Customer Support * Identifiers: User & Device ID * Diagnostics: Crash Data Other Purposes: * User Content: Other User Content | Not Accurate - Email address, purchase history and User/Device ID are linked to a user. - FB collects mobile carrier from SIM as part of telemetry | No label | Not Accurate Collects: - username - name - IP address - Session dates and data transferred - collects device name | Identifiers: Device ID | Yes | No label | N/A | From the privacy policy: * We collect certain personal data directly from you", including: First and last name, Email address, Username and password (in a hashed format), IP address, Browser type and OS, Device name, code, manufacturer, and language, Time zone, connection type, WiFi network name, Country, Total amount of web traffic for each session and session dates (for certain products only), Other data collected in accordance with Cookies Policy, payment history. * We may also collect personal data, such as names and contact information, from third parties, such as marketing, research, sales lead generator companies, social networks, as well as from any publicly-accessible sources. * Certain personal data collected by us [...] IP address, connection type, browser type and operating system [...] is stored only for the duration of your session in the VPN Services [...] This also means that your personal data, including your email address, first and last name, username, and IP address, is never connected to any of your internet activities during your VPN Services sessions. Tests show that Facebook collects mobile carrier from SIM even with mobile data switched off. Device name (ie the user-defined name) also collected by VPN provider. | https://web.archive.org/web/20210407075034/https://www.keepsolid.com/privacy-policy |
55 | VPN゜ | 1456731716 | https://web.archive.org/web/20210317102923/https://apps.apple.com/US/app/id1456731716 | Dream Downloader Infotech Ltd. | 30,000 | 30,000 | 60,000 | No label | N/A | No label | N/A | No label | N/A | Label present | Not Accurate | From the privacy policy: * We collect non-personal information about your use of our apps and aggregated information regarding the usages of the apps. "Non-personal Information" means information that is of an anonymous nature, such as the type of mobile device you use, your mobile devices unique device ID, the IP address of your mobile device, your mobile operating system, and information about the way you use the applications. * Advertisers who serve ads may use technology which can uniquely identify mobile devices to deliver better target messages and control number of times you get an Add. Ad Networks may access your unique device identifier through their own technologies and use it to target advertising to you. * VPN Proxy application uses Google AdMob ads as primary ad service network. | https://web.archive.org/web/20191206115714/http://dreamdownloader.net/api/vpn/privacy.php |
56 | VPN゜゜ | 1474675452 | https://web.archive.org/web/20210317092706if_/https://apps.apple.com/US/app/id1474675452 | Minoti | 40,000 | 40,000 | 80,000 | Analytics * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data App Functionality * Purchases: Purchase History | Not Accurate - Collects IP address (and thus coarse location - Collects device identifiers, including ISP | No label | Not Accurate - Collects lP address - Collects Unique Device ID | No label | Yes | No label | N/A | From the privacy policy: * "NO LOG POLICY . WE DO NOT KEEP LOG OF ANY USER DATA OR INTERNET ACTIVITY" (caps as per policy) * We keep Zero Log. That is right. Many of our competitors keep even your personal email address. Whatever you do is your own business. We are zero logs VPN Company. Whatever you do is your own business. Note: There is nothing else stated anywhere on the developer website regarding data collection, meaning that the labels assigned on the app store are based on information not publicly available. Tests confirm collection of data shown. | https://web.archive.org/web/20210323122624/https://securevpn.io/privacy-policy/ |
57 | X-VPN | 1250312807 | https://web.archive.org/web/20210317092203/https://apps.apple.com/US/app/id1250312807 | Free Connected Limited | 300,000 | 300,000 | 600,000 | No label | Not Accurate - Logs websites visited when connected to the VPN. Aggregated and not tied to any specific user | Third-Party Advertising * Purchases: Purchase History * Location: Precise Location, Coarse Location * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Advertising Data, Other Usage Data * Diagnostics: Crash Data, Performance Data Analytics * Purchases: Purchase History * Location: Coarse Location * Identifiers: User ID, Device ID * Usage Data: Product Interaction, Other Usage Data * Diagnostics: Performance Data Product Personalization * Purchases: Purchase History * Location: Coarse Location * Diagnostics: Other Diagnostic Data App Functionality * Purchases: Purchase History * Location: Coarse Location * Contact Info: Email Address * Identifiers: User ID & Device ID * Diagnostics: Crash Data, Performance Data, Other Diagnostic Data | Yes | Purchases: Purchase History Location: Precise Location & Coarse Location Identifiers: User ID & Device ID Usage Data: Product Interaction, Advertising Data & Other Usage Data Diagnostics: Performance Data | Yes | No label | N/A | From the privacy policy: - "Such as the connection timestamp, choice of the protocol, network type and error report" - "Such as your device information, app version, data usage and geolocation(only city-level)" - "Such as sites visited via our servers from all users, it is anonymous aggregated data mixed from our tens of millions users which is non-identifying. we do not attribute any website visit or app usage to any specific user" - "X-VPN uses exceptionally strong safeguards to protect the privacy of all our records, including your Personal Data. We implement physical, business and technical security measures" | https://web.archive.org/web/20210325161149/https://xvpn.io/?n=best.free.xvpn.PrivacyPolicyPage |