Gmail
Platform · declared: 27 data types collected, 0 shared No tracking declared
Measured network activity crowdsourced
Observed in donated App Privacy Reports — measured on real iPhones by iOS itself, not declared by the developer. Every row below was reported by at least 3 separate accepted donations and published under a human verdict — rows marked inherited verdict arrived after a reviewer approved this app's evidence and inherited that decision. Contact counts and dates are aggregates across the donated reports.
| Contacted domain | Company | Classification | Donations | Contacts | Seen |
|---|---|---|---|---|---|
mail.google.com |
— | first-party | 3 | 78 | 2026-07-30 |
inbox.google.com |
— | first-party | 3 | 75 | 2026-07-30 |
notifications-pa.googleapis.com |
— | first-party | 3 | 69 | 2026-07-30 |
mail-attachment.googleusercontent.com |
— | first-party | 3 | 57 | 2026-07-30 |
play.googleapis.com |
— | first-party | 3 | 51 | 2026-07-30 |
oauthaccountmanager.googleapis.com |
— | first-party | 3 | 48 | 2026-07-30 |
lh3.googleusercontent.com |
— | cdn | 3 | 45 | 2026-07-30 |
peoplestack-pa.googleapis.com |
— | first-party | 3 | 45 | 2026-07-30 |
www.googleapis.com |
— | first-party | 3 | 45 | 2026-07-30 |
appsgenaiserver-pa.googleapis.com |
— | first-party | 3 | 42 | 2026-07-30 |
people-pa.googleapis.com |
— | first-party | 3 | 33 | 2026-07-30 |
taskassist-pa.googleapis.com |
— | first-party | 3 | 33 | 2026-07-30 |
addons-pa.googleapis.com |
— | first-party | 3 | 27 | 2026-07-30 |
ci3.googleusercontent.com |
— | first-party | 3 | 27 | 2026-07-30 |
cloudidentity.googleapis.com |
— | first-party | 3 | 24 | 2026-07-30 |
oauth2.googleapis.com |
— | first-party | 3 | 24 | 2026-07-30 |
ogads-pa.googleapis.com |
— | first-party | 3 | 24 | 2026-07-30 |
cloudsearch.googleapis.com |
— | first-party | 3 | 21 | 2026-07-30 |
ios-mdm.googleusercontent.com |
— | first-party | 3 | 21 | 2026-07-30 |
appsgrowthpromo-pa.googleapis.com |
— | first-party | 3 | 18 | 2026-07-30 |
meetings.googleapis.com |
— | first-party | 3 | 18 | 2026-07-30 |
subscriptionsfirstparty-pa.googleapis.com |
— | first-party | 3 | 18 | 2026-07-30 |
accountcapabilities-pa.googleapis.com |
— | first-party | 3 | 15 | 2026-07-30 |
cdn.ampproject.org |
— | cdn | 3 | 15 | 2026-07-30 |
growth-pa.googleapis.com |
— | first-party | 3 | 15 | 2026-07-30 |
inappcheck.itunes.apple.com |
— | first-party | 3 | 15 | 2026-07-30 |
iosantiabuse-pa.googleapis.com |
— | first-party | 3 | 15 | 2026-07-30 |
accounts.google.com |
— | first-party | 3 | 12 | 2026-07-30 |
ssl.gstatic.com |
— | cdn | 3 | 12 | 2026-07-30 |
subscriptionsmobile-pa.googleapis.com |
— | first-party | 3 | 12 | 2026-07-30 |
lh7-rt.googleusercontent.com |
— | cdn | 3 | 6 | 2026-07-30 |
drivefrontend-pa.googleapis.com |
— | first-party | 3 | 3 | 2026-07-30 |
drivelabels.googleapis.com |
— | first-party | 3 | 3 | 2026-07-30 |
reach-pa.googleapis.com |
— | first-party | 3 | 3 | 2026-07-30 |
tasks-pa.googleapis.com |
— | first-party | 3 | 3 | 2026-07-30 |
How to read this
- A contact is a measurement, not an accusation. iOS records that the app (or code inside it, like an ad or analytics SDK) reached the domain. It does not show what data was sent.
- Counts reflect the donors' usage. A heavily-used app produces more contacts; compare domains within this app, not across apps.
- Separate donations, not proven separate people. Donations are anonymous by design, so we can count donations — we cannot prove three donations came from three donors. Human review weighs that before anything publishes.
- "Not in label" is the finding that matters. It means measured behavior with no matching disclosure in the app's own store privacy label — the declared-vs-observed gap this database exists to expose.
Domain owner/type attribution from Apple's App Privacy Report where the donor's export carried it; tracker classification via the AdGuard companiesdb (CC BY-SA 4.0). You can add to this evidence: donate your own App Privacy Report — parsed in your browser, shared only with your per-app consent, accepted anonymously (no account, no email, no IP address stored).
Think something here is wrong?
Evidence and research improve when people push back. Tell us what to re-check — a misattributed domain, an outdated classification, a claim about your own app — and a human will review it. Responses can take up to 30 days.