This page aggregates measured, corroborated evidence: donors' iPhones recorded apps contacting this domain, every claim below was reported by separate accepted donations and published under a human verdict (later rows for an approved app inherit its verdict). A contact is a measurement, not an accusation — it does not show what data was sent.
oauth2.googleapis.com
classified as first-party · 2
What our research panel found AI-drafted · human-reviewed
We ask several independent AI models the same question and publish their answers separately — cross-vendor agreement is evidence against fabrication, and disagreement is worth seeing. 3 of 3 models answered, overall confidence high. A human reviewed this domain's claims before anything here published.
Anthropic Claude — first-party
oauth2.googleapis.com is Google's OAuth 2.0 token endpoint, and the app is published by Google, so this is first-party authentication infrastructure rather than a tracking or ad endpoint. Account sign-in traffic is consistent with the app's declared collection of email address and user IDs, so nothing here indicates an undisclosed data flow.
OpenAI — first-party
oauth2.googleapis.com is a Google OAuth service domain and is plausibly first-party for Google Authenticator. The broad declared collection label covers likely authentication-related identifiers, so an undisclosed flow cannot be established from the provided data.
Google Gemini — first-party
oauth2.googleapis.com is an authentication endpoint operated by Google, making this a first-party domain for Google Authenticator. The app declares collecting account and user identifiers, which aligns with standard OAuth authentication.
Apps measured contacting this domain
| App | Label gap | Donations | Contacts | Seen |
|---|---|---|---|---|
| Google Authenticator | — | 7 | 82 | 2026-07-28 → 2026-07-30 |
| YouTube | — | 4 | 16 | 2026-07-28 → 2026-07-29 |
| Google Gemini | — | 4 | 8 | 2026-07-28 → 2026-07-29 |
com.google.Chromecast | — | 4 | 7 | 2026-07-28 → 2026-07-29 |
com.google.GoogleDigitalEditions | — | 4 | 4 | 2026-07-28 → 2026-07-29 |
| Gmail | — | 3 | 24 | 2026-07-30 |
| Google Maps | — | 3 | 21 | 2026-07-30 |
| Google (Search) | — | 3 | 3 | 2026-07-30 |
The corpus grows one report at a time: donate your App Privacy Report — anonymous by design.
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.