This page aggregates measured, corroborated evidence: donors' iPhones recorded apps contacting this domain, every claim below was reported by separate accepted donations and published under a human verdict (later rows for an approved app inherit its verdict). A contact is a measurement, not an accusation — it does not show what data was sent.
firebaseremoteconfig.googleapis.com
operated by Google LLC · classified as unknown · 1
Independent tracker databases attribute this domain to Google LLC (Firebase Remote Config), associated with data such as device ID, installation ID, country/language/timezone, screen size — per TrackHAR (CC0).
What our research panel found AI-drafted · human-reviewed
We ask several independent AI models the same question and publish their answers separately — cross-vendor agreement is evidence against fabrication, and disagreement is worth seeing. 3 of 3 models answered, overall confidence low — classification split: anthropic=first-party, openai=analytics, gemini=cdn. A human reviewed this domain's claims before anything here published.
Anthropic Claude — first-party
firebaseremoteconfig.googleapis.com is Google's Firebase Remote Config endpoint, a feature-flag/configuration delivery service rather than an ad or analytics beacon; since Waze is a Google subsidiary this reads as first-party backend infrastructure, though the bucket is arguable because the same endpoint is used by many third-party apps. Remote Config requests carry an app instance ID and basic device/app attributes, which fall within the app's declared collection of User IDs, Diagnostics and App interactions and its declared sharing of Device or other IDs, so nothing here appears uncovered by the label.
OpenAI — analytics
firebaseremoteconfig.googleapis.com is a Google Firebase Remote Config endpoint, typically used for app configuration and experimentation rather than advertising. The provided privacy label already declares collection of diagnostics, app interactions, and device or other IDs, so this contact alone does not establish an undisclosed data flow.
Google Gemini — cdn
Firebase Remote Config is used to fetch dynamic app configurations and feature flags, acting as operational service infrastructure. Because Google owns Waze and the app discloses diagnostics and app interactions, this communication does not appear undisclosed.
Apps measured contacting this domain
| App | Label gap | Donations | Contacts | Seen |
|---|---|---|---|---|
| Fly Delta | — | 7 | 44 | 2026-07-28 → 2026-07-30 |
| Waze | — | 7 | 10 | 2026-07-28 → 2026-07-30 |
| AccuWeather | — | 4 | 25 | 2026-07-28 → 2026-07-29 |
| Costco Wholesale | — | 4 | 24 | 2026-07-28 → 2026-07-29 |
com.ilbsoft.irelax | — | 4 | 15 | 2026-07-28 → 2026-07-29 |
| Speedtest by Ookla | — | 4 | 12 | 2026-07-28 → 2026-07-29 |
| eBay online shopping & selling | — | 4 | 9 | 2026-07-28 → 2026-07-29 |
| Expedia: Hotels, Flights, Cars | — | 4 | 8 | 2026-07-28 → 2026-07-29 |
| Uber | — | 4 | 8 | 2026-07-28 → 2026-07-29 |
com.nypost.iphone | — | 4 | 7 | 2026-07-28 → 2026-07-29 |
com.fiverr.fiverr | — | 4 | 5 | 2026-07-28 → 2026-07-29 |
| Allegiant | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
| Kickstarter | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
com.weatherradarforecastlive.radar | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
com.raymondjames.investoraccess | — | 3 | 6 | 2026-07-30 |
The corpus grows one report at a time: donate your App Privacy Report — anonymous by design.
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.