Social · declared: 37 data types collected, 5 shared Tracks you
Measured network activity crowdsourced
Observed in donated App Privacy Reports — measured on real iPhones by iOS itself, not declared by the developer. Every row below was reported by at least 3 separate accepted donations and published under a human verdict — rows marked inherited verdict arrived after a reviewer approved this app's evidence and inherited that decision. Contact counts and dates are aggregates across the donated reports.
| Contacted domain | Company | Classification | Donations | Contacts | Seen |
|---|---|---|---|---|---|
*-netseer-ipaddr-assoc.xz.fbcdn.net22 hostnames grouped |
— | cdn | 7 | 63 | 2026-07-28 → 2026-07-30 |
web.facebook.com |
Facebook, Inc. 1 |
first-party | 7 | 47 | 2026-07-28 → 2026-07-30 |
graph.facebook.com |
Facebook, Inc. 1 |
first-party | 7 | 46 | 2026-07-28 → 2026-07-30 |
api.facebook.com |
— | first-party | 7 | 26 | 2026-07-28 → 2026-07-30 |
www.facebook.com |
Facebook, Inc. 1 |
first-party | 7 | 26 | 2026-07-28 → 2026-07-30 |
mzstorekit.itunes.apple.com |
— | first-party | 7 | 21 | 2026-07-28 → 2026-07-30 |
gateway.facebook.com |
— | first-party | 4 | 25 | 2026-07-28 → 2026-07-30 |
scontent-mia5-1.xx.fbcdn.net |
— | cdn | 4 | 7 | 2026-07-28 → 2026-07-30 |
scontent-mia3-3.xx.fbcdn.net |
— | cdn | 4 | 5 | 2026-07-28 → 2026-07-30 |
scontent-lga3-2.xx.fbcdn.net |
— | cdn | 4 | 4 | 2026-07-28 → 2026-07-29 |
scontent-mia5-2.xx.fbcdn.net |
— | cdn | 4 | 4 | 2026-07-28 → 2026-07-29 |
*-netseer-ipaddr-assoc.xy.fbcdn.net9 hostnames grouped |
— | cdn | 3 | 27 | 2026-07-30 |
attester.gateway.icloud.com |
— | first-party | 3 | 9 | 2026-07-30 |
scontent-bos5-1.xx.fbcdn.net |
— | cdn | 3 | 9 | 2026-07-30 |
scontent-ord5-1.xx.fbcdn.net |
— | cdn | 3 | 9 | 2026-07-30 |
chat-e2ee.facebook.com |
— | first-party | 3 | 6 | 2026-07-30 |
connect.facebook.net |
— | first-party | 3 | 6 | 2026-07-30 |
mobile.facebook.com |
— | first-party | 3 | 6 | 2026-07-30 |
scontent-ord5-2.xx.fbcdn.net |
— | cdn | 3 | 6 | 2026-07-30 |
scontent-ord5-3.xx.fbcdn.net |
— | cdn | 3 | 6 | 2026-07-30 |
cdn.fbsbx.com |
— | cdn | 3 | 3 | 2026-07-30 |
external-bos5-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
external-ord5-3.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
genai-graph.facebook.com |
— | first-party | 3 | 3 | 2026-07-30 |
graph-fallback.facebook.com |
— | first-party | 3 | 3 | 2026-07-30 |
ocsp.godaddy.com |
— | unknown | 3 | 3 | 2026-07-30 |
rupload.facebook.com |
— | first-party | 3 | 3 | 2026-07-30 |
scontent-atl3-2.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-dfw5-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-dfw5-2.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-dfw6-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-dfw6-2.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-hou1-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-iad3-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-iad6-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-mia3-1.cdninstagram.com |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-mia3-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-29 |
scontent-mia3-2.cdninstagram.com |
— | cdn | 3 | 3 | 2026-07-30 |
scontent-mia5-1.cdninstagram.com |
— | cdn | 3 | 3 | 2026-07-30 |
static-bos5-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
static-ord5-3.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
video-dfw5-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
video-dfw5-2.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
video-dfw6-1.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
video-dfw6-2.xx.fbcdn.net |
— | cdn | 3 | 3 | 2026-07-30 |
Sensor & data access crowdsourced
iOS itself recorded these accesses on donors' iPhones — how many times the app touched each privacy-protected resource. Every row was reported by at least 3 separate accepted donations and published under a human verdict (rows arriving after an app's evidence was approved inherit that verdict). Counts are totals across the donated reports; access times are never collected.
| Resource | Donations | Accesses | Seen |
|---|---|---|---|
| Photos | 3 | 24 | 2026-07-30 |
How to read this
- A contact is a measurement, not an accusation. iOS records that the app (or code inside it, like an ad or analytics SDK) reached the domain. It does not show what data was sent.
- Counts reflect the donors' usage. A heavily-used app produces more contacts; compare domains within this app, not across apps.
- Separate donations, not proven separate people. Donations are anonymous by design, so we can count donations — we cannot prove three donations came from three donors. Human review weighs that before anything publishes.
- "Not in label" is the finding that matters. It means measured behavior with no matching disclosure in the app's own store privacy label — the declared-vs-observed gap this database exists to expose.
Domain owner/type attribution from Apple's App Privacy Report where the donor's export carried it; tracker classification via the AdGuard companiesdb (CC BY-SA 4.0). You can add to this evidence: donate your own App Privacy Report — parsed in your browser, shared only with your per-app consent, accepted anonymously (no account, no email, no IP address stored).
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.