This page aggregates measured, corroborated evidence: donors' iPhones recorded apps contacting this domain, every claim below was reported by separate accepted donations and published under a human verdict (later rows for an approved app inherit its verdict). A contact is a measurement, not an accusation — it does not show what data was sent.
mobile-data.onetrust.io
classified as unknown · 2
What our research panel found AI-drafted · human-reviewed
We ask several independent AI models the same question and publish their answers separately — cross-vendor agreement is evidence against fabrication, and disagreement is worth seeing. 3 of 3 models answered, overall confidence low — classification split: anthropic=unknown, openai=first-party, gemini=analytics · undisclosed split: anthropic=false, openai=false, gemini=true. A human reviewed this domain's claims before anything here published.
Anthropic Claude — unknown
mobile-data.onetrust.io is an endpoint of OneTrust, a consent/privacy-management platform vendor; its mobile SDK typically fetches consent templates and geo/jurisdiction rules and records consent receipts, which does not map cleanly onto tracker, analytics, advertising, CDN, or first-party, so I classify it as unknown rather than guess. Because a consent-management call is compliance infrastructure that may not require a data-collection disclosure, and the record supplied gives no evidence of identifier or behavioral data being sent, I cannot conclude the empty label is contradicted.
OpenAI — first-party
mobile-data.onetrust.io appears associated with OneTrust's privacy-consent infrastructure rather than clearly indicating advertising or analytics collection. The provided information does not establish a data flow beyond consent-related service operation, so undisclosed status cannot be determined.
Google Gemini — analytics
mobile-data.onetrust.io is operated by OneTrust, a third-party consent management and telemetry provider. Because the app declares no data collection or sharing in its store privacy label, this contact appears undisclosed.
Apps measured contacting this domain
| App | Label gap | Donations | Contacts | Seen |
|---|---|---|---|---|
| Speedtest by Ookla | — | 4 | 17 | 2026-07-28 → 2026-07-29 |
| Expedia: Hotels, Flights, Cars | — | 4 | 16 | 2026-07-28 → 2026-07-29 |
| Booking.com: Hotels & Travel | — | 4 | 12 | 2026-07-28 → 2026-07-29 |
com.glip.mobile | — | 4 | 10 | 2026-07-28 → 2026-07-29 |
com.yelp.yelpiphone | — | 4 | 8 | 2026-07-28 → 2026-07-29 |
com.fiverr.fiverr | — | 4 | 5 | 2026-07-28 → 2026-07-29 |
| OpenTable | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
com.hotels.HotelsNearMe | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
com.nypost.iphone | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
| Tripadvisor: Plan & Book Trips | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
com.vanguard.app | — | 3 | 3 | 2026-07-30 |
The corpus grows one report at a time: donate your App Privacy Report — anonymous by design.
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.