This page aggregates measured, corroborated evidence: donors' iPhones recorded apps contacting this domain, every claim below was reported by separate accepted donations and published under a human verdict (later rows for an approved app inherit its verdict). A contact is a measurement, not an accusation — it does not show what data was sent.
www.americanexpress.com
classified as first-party · 2
What our research panel found AI-drafted · human-reviewed
We ask several independent AI models the same question and publish their answers separately — cross-vendor agreement is evidence against fabrication, and disagreement is worth seeing. 3 of 3 models answered, overall confidence high. A human reviewed this domain's claims before anything here published.
Anthropic Claude — first-party
www.americanexpress.com is the primary web domain of American Express, the publisher of the Amex app (bundle id com.americanexpress.amexservice), so this is a first-party contact consistent with the app's core account and payment functionality. The declared collection of payment info, financial info, identifiers and contact details covers this flow, so nothing here appears undisclosed.
OpenAI — first-party
The contacted domain matches the American Express brand and is most likely a first-party service domain for the Amex app. The privacy label declares extensive collection categories, so this contact alone does not imply an undeclared data flow.
Google Gemini — first-party
The contacted domain www.americanexpress.com belongs directly to the app developer, American Express. As a first-party network endpoint, this contact does not represent undisclosed third-party data collection or sharing.
Apps measured contacting this domain
| App | Label gap | Donations | Contacts | Seen |
|---|---|---|---|---|
| Amex | — | 7 | 24 | 2026-07-28 → 2026-07-30 |
com.americanexpress.ios.travel | — | 4 | 33 | 2026-07-28 → 2026-07-29 |
The corpus grows one report at a time: donate your App Privacy Report — anonymous by design.
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.