This page aggregates measured, corroborated evidence: donors' iPhones recorded apps contacting this domain, every claim below was reported by separate accepted donations and published under a human verdict (later rows for an approved app inherit its verdict). A contact is a measurement, not an accusation — it does not show what data was sent.
imap.gmail.com
classified as unknown · 2
What our research panel found AI-drafted · human-reviewed
We ask several independent AI models the same question and publish their answers separately — cross-vendor agreement is evidence against fabrication, and disagreement is worth seeing. 2 of 3 models answered, overall confidence low — classification split: anthropic=unknown, openai=first-party · no answer from gemini (parse). A human reviewed this domain's claims before anything here published.
Anthropic Claude — unknown
imap.gmail.com is Google's IMAP mail endpoint, contacted when a user has configured a Gmail account for Notes sync; it is not an analytics, advertising, or CDN endpoint, and the available categories do not cleanly cover a user-configured third-party account service, so I decline to force a label. The contact is user-initiated account functionality rather than an implied undisclosed data flow, and note that com.apple.mobilenotes is a preinstalled app that may not carry a store privacy label at all, so 'nothing declared' is not evidence of concealment.
OpenAI — first-party
imap.gmail.com is Gmail's IMAP mail service, contacted by the Apple Notes app likely for a user-configured Gmail account rather than tracking or advertising. The provided label information alone does not establish an undisclosed app data flow.
Apps measured contacting this domain
| App | Label gap | Donations | Contacts | Seen |
|---|---|---|---|---|
com.apple.mobilenotes | — | 4 | 194 | 2026-07-28 → 2026-07-29 |
The corpus grows one report at a time: donate your App Privacy Report — anonymous by design.
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.