← App Privacy Database

Measured in the wild

Apps and domains with corroborated evidence from donated App Privacy Reports, published under human verdicts.

Everything on this page cleared two gates: it was observed in at least 3 separate accepted donations, and it publishes only under a human verdict — a reviewer approves each app's evidence, and rows arriving later for that app inherit the decision (marked on the app's page). This is the measured layer of the App Privacy Database — not what apps declare, but what donors' iPhones recorded them doing.

Apps with measured evidence

AppNetwork findingsSensor findings
Speedtest by Ookla71—
Facebook451
Booking.com: Hotels & Travel42—
Fly Delta42—
AliExpress - Shopping App38—
Google Maps371
YouTube38—
Gmail35—
ChatGPT311
eBay online shopping & selling31—
Phone by Google292
Alibaba.com - B2B marketplace30—
Expedia: Hotels, Flights, Cars30—
The Weather Channel26—
Costco Wholesale25—
Rocket Money - Bills & Budgets24—
Temu24—
Amazon Shopping23—
Google Gemini22—
Waze211
Amazon Business: B2B Shopping21—
Google (Search)21—
My BMW21—
OpenTable20—
AccuWeather19—
Grok AI181
Tripadvisor: Plan & Book Trips19—
Walmart19—
Amex18—
Uber18—
PayPal - Pay, Send, Save17—
Curb - Request & Pay for Taxis16—
trivago: Compare hotel prices16—
Chase Mobile15—
Claude by Anthropic14—
Kickstarter14—
Messages - SMS, Text, Launcher104
Allegiant13—
Instagram111
Bank of America Mobile Banking10—
Lyft10—
Zoom Earth - Weather Forecast9—
GitHub8—
Google Authenticator71
Apple Music7—
Microsoft Authenticator7—
Amazon Music: Songs & Podcasts6—
Proton Mail: Encrypted Email51
Weather app6—
Air France - Book a flight4—
KLM - Book a flight4—
Truth Social4—
Calendar 202621
Messenger3—
Reolink3—
KAYAK: Flights, Hotels & Cars2—
Microsoft Outlook2—
Proton VPN: Fast & Secure VPN2—
Telegram2—
Wayfair - Shop All Things Home2—
WhatsApp2—
Afterpay: Pay over time1—
Airbnb1—
Contacts—1
E*TRADE: Invest. Trade. Save.1—
IMDb: Movies & TV Shows1—
LinkedIn1—
Microsoft 365 Copilot1—
Ring - Always Home1—
Strava: Run, Bike, Walk1—
TikTok1—
Trip.com: Book Flights, Hotels1—
Wells Fargo Mobile®1—

Domains observed

Ordered by reach: how many measured apps contact each domain. Every domain links to its own page — who operates it, what our research panel concluded, and every app tied to it.

DomainOwnerAppsDonations
firebaseinstallations.googleapis.com—37148
app-analytics-services.com—34134
firebase-settings.crashlytics.comGoogle LLC32131
firebaselogging-pa.googleapis.comGoogle LLC27110
mzstorekit.itunes.apple.com—2084
inappcheck.itunes.apple.com—1967
ocsp.digicert.com—1663
ocsp2.apple.com—1663
firebaseremoteconfig.googleapis.comGoogle LLC1565
mask.icloud.com—1557
amp-api-edge.apps.apple.com—1460
bag.itunes.apple.com—1363
gateway.icloud.com—1363
gsp-ssl.ls.apple.com—1361
mobile-data.onetrust.io—1143
www.googleapis.com—1043
lh3.googleusercontent.com—1038
gspe19-2-ssl.ls.apple.com—950
gspe19-ssl.ls.apple.com—950
play.googleapis.com—940
oauthaccountmanager.googleapis.com—936
device-provisioning.googleapis.com—935
fpinit.itunes.apple.com—834
graph.facebook.comFacebook, Inc.834
ep2.facebook.com—832
googleads.g.doubleclick.netGoogle LLC832
oauth2.googleapis.com—832
people-pa.googleapis.com—831
assets.adobedtm.com—733
www.google.com—732
crashlyticsreports-pa.googleapis.comGoogle LLC730
pubads.g.doubleclick.netGoogle LLC728
cdn.cookielaw.org—727
setup.icloud.com—727
events.mapbox.com—726
metrics.icloud.com—636
sc.omtrdc.netAdobe Inc.630
clients3.google.com—626
firebaseremoteconfigrealtime.googleapis.com—626
analytics.adjust.com—623
config.mapbox.com—622
is1-ssl.mzstatic.com—526
configuration.apple.com—521
g.doubleclick.netGoogle LLC520
api.mapbox.com—519
api.mixpanel.comMixpanel, Inc.519
tpc.googlesyndication.com—519
notifications-pa.googleapis.com—517
itunes.apple.com—421
api.revenuecat.comRevenueCat419
apps.mzstatic.com—419
entitlements.itunes.apple.com—419
dpm.demdex.netAdobe Inc.418
census-app-x.scorecardresearch.com—416
device.marketingcloudapis.comSalesforce.com, Inc.416
muf.app-ads-services.com—416
odf.app-ads-services.com—416
securepubads.g.doubleclick.netGoogle LLC416
ssl.google-analytics.comGoogle LLC416
*.ingest.us.sentry.io (hostname family)—415
bf.dynatrace.comDynatrace LLC415
accountcapabilities-pa.googleapis.com—414
usuyk1.icloud-content.com—318
gcs-us-00003.content-storage-upload.googleapis.com—317
gspe21-ssl.ls.apple.com—317
pancake.apple.com—316
config.edge.skype.com—315
ingest.sentry.ioFunctional Software, Inc.315
m.media-amazon.com—315
mapsmobilesdks-pa.googleapis.com—315
web.facebook.comFacebook, Inc.315
*.us-east-1.prod.service.minerva.devices.a2z.com (hostname family)—314
api.ipify.org—312
browser-intake-datadoghq.comDatadog, Inc.312
cdn.forter.comForter Inc.312
cdn4.forter.comForter Inc.312
iad-06.braze.comBraze, Inc.312
m.api.forter.com—312
scontent-mia3-2.xx.fbcdn.net—312
skan.singular.net—312
weatherkit.apple.com—312
www.app-ads-services.com—312
www.googletagmanager.comGoogle LLC312
www.paypalobjects.com—312
aa.online-metrix.net—311
api3.branch.io—311
cdn.branch.io—311
h64.online-metrix.net—311
ocsp.godaddy.com—311
storage.googleapis.com—311
accounts.google.com—310
attester.gateway.icloud.com—310
growth-pa.googleapis.com—310
ssl.gstatic.com—310
www.gstatic.com—310
edge-222.usmia1.icloud-content.com—39
*-netseer-ipaddr-assoc.xz.fbcdn.net (hostname family)—214
api.facebook.com—214
edge-097.usmia1.icloud-content.com—212
*.appsync-api.us-east-1.amazonaws.com (hostname family)—211
api-production.8-lives-cat.io—211
api.amazon.com—211
api.mshop.bdtelemetry.amazon—211
arcus-uswest.amazon.com—211
data.adobedc.netAdobe Inc.211
data.amazon.com—211
difbymfufwhaj.cloudfront.net—211
dyqv1d0rgwsrm.cloudfront.net—211
featureassets.org—211
firebaseappcheck.googleapis.com—211
init-p01md.apple.com—211
init.ess.apple.com—211
msh.amazon.com—211
prime.amazon.com—211
prodregistryv2.org—211
s.mzstatic.com—211
session.mshopbugsnag.irm.amazon.dev—211
trace.mshopbugsnag.irm.amazon.dev—211
transient.amazon.com—211
unagi-na.amazon.com—211
us-prod-temp.s3.amazonaws.com—211
www.aexp-static.com—211
www.amazon.com—211
www.americanexpress.com—211
www.facebook.comFacebook, Inc.211
*-expediaxm.siteintercept.qualtrics.com (hostname family)—28
0.datadog.pool.ntp.org—28
2.datadog.pool.ntp.org—28
a.travel-assets.com—28
a1-us.iotbing.com—28
acs.m.taobao.com—28
api-m.paypal.com—28
api-mobile.airfranceklm.com—28
api-sdk.datadome.coDataDome28
api.sprig.com—28
braze-images.com—28
c.amazon-adsystem.com—28
c.apple.news—28
clickstream-event-manager-service.test.expedia.com—28
combine.urbanairship.comUrban Airship, Inc.28
device-api.urbanairship.comUrban Airship, Inc.28
ec.pcms.apple.com—28
edge-103.usbos2.icloud-content.com—28
firestore.googleapis.com—28
forever.travel-assets.com—28
g.alicdn.com—28
global-orange-source.alibaba.com—28
gw.alicdn.com—28
icm.aexp-static.com—28
images.trvl-media.com—28
in.appcenter.msMicrosoft Corporation28
mads.amazon-adsystem.comAmazon Technologies, Inc.28
mobile-api.rokt.com—28
news-assets.apple.com—28
news.iadsdk.apple.com—28
pagead2.googlesyndication.comGoogle LLC28
ps.pndsn.com—28
remote-data.urbanairship.com—28
s.amazon-adsystem.com—28
sf-api-token-service.itunes.apple.com—28
stats.paypal.comPayPal, Inc.28
time.apple.com—28
tr.iadsdk.apple.com—28
us.criteo.comCriteo SA28
wvcfg.alicdn.com—28
3.datadog.pool.ntp.org—27
ad.doubleclick.net—27
api.segment.ioSegment.io, Inc.27
api3.siftscience.comSift Science, Inc.27
browser-intake-us5-datadoghq.com—27
cacerts.digicert.com—27
chat-e2ee.facebook.com—27
d1imosqlhij19v.cloudfront.net—27
dns.google—27
dns.quad9.net—27
edge-061.usmia1.icloud-content.com—27
edge-092.usmia1.icloud-content.com—27
encrypted-tbn2.gstatic.com—27
encrypted-tbn3.gstatic.com—27
fonts.gstatic.com—27
googlehomefoyer-pa.googleapis.com—27
iosantiabuse-pa.googleapis.com—27
nexus-websocket-a.intercom.io—27
prod-2.us-east-1.mdcs.mshop.amazon.dev—27
reach-pa.googleapis.com—27
sdk.iad-05.braze.com—27
subscriptionsfirstparty-pa.googleapis.com—27
*-netseer-ipaddr-assoc.xy.fbcdn.net (hostname family)—26
app-measurement.comGoogle LLC26
edge-012.usmia1.icloud-content.com—26
edge-041.nlhfd1.icloud-content.com—26
edge-054.usmia1.icloud-content.com—26
edge-064.usmia1.icloud-content.com—26
edge-175.usuyk1.icloud-content.com—26
edge-208.usmia1.icloud-content.com—26
edge-245.usuyk1.icloud-content.com—26
encrypted-tbn0.gstatic.com—26
is2-ssl.mzstatic.com—26
p175-content.icloud.com—26
peoplestack-pa.googleapis.com—26
scontent-bos5-1.xx.fbcdn.net—26
*-deltacx.siteintercept.qualtrics.com (hostname family)—17
ab.chatgpt.com—17
ads-resources.waze.com—17
adsassets.waze.com—17
amd-infra.itunes.apple.com—17
amp-api-search-edge.apps.apple.com—17
amp-api.apps.apple.com—17
amp-api.media.apple.com—17
analytics.chase.com—17
api.countly.bmwusa.com—17
api.delta.com—17
apigateway.americanexpress.com—17
assets-mercury.mzstatic.com—17
attest.api.approov.io—17
auth.grammarly.com—17
catalog-api-prd.delta.com—17
cdn.quantummetric.com—17
cocoapi.bmwgroup.us—17
com-amazon-amazon.triggers-v1.prod.mobile.weblab.a2z.com—17
content.delta.com—17
cres.waze.com—17
cresg.waze.com—17
ctilesgcs-am.waze.com—17
customer-api.delta.com—17
dlt-beacon.dynatrace-managed.comDynatrace LLC17
edge-055.usmia1.icloud-content.com—17
enterprisepayments-api.delta.com—17
experiments.apple.com—17
f-log-mobile-ios.grammarly.io—17
gateway.americas.allianz-assistance.com—17
gnar.grammarly.com—17
gsp36-ssl.ls.apple.com—17
gsp51-ssl.ls.apple.com—17
images-mercury.mzstatic.com—17
images.openai.com—17
inbox-am.ingress.waze.com—17
ingestusipv4.quantummetric.com—17
ios.chat.openai.com—17
iosapps.itunes.apple.com—17
iwmapapi.americanexpress.com—17
login.bmwusa.com—17
loyalty-api.delta.com—17
mfasa.chase.com—17
mobile-api.delta.com—17
mobileone.americanexpress.com—17
o33249.ingest.us.sentry.io—17
ocsp.r2m01.amazontrust.com—17
passbox-pa.googleapis.com—17
pd.itunes.apple.com—17
pieventscapture.americanexpress.com—17
renderer-am.waze.com—17
rl.quantummetric.com—17
rt-xlb-am.waze.com—17
s-gke-usc1-nssi4-18.firebaseio.com—17
sdk.waze.com—17
securetoken.googleapis.com—17
signin.delta.com—17
t0.gstatic.com—17
t1.gstatic.com—17
t2.gstatic.com—17
t3.gstatic.com—17
testflight.apple.com—17
tts-assets.voice.waze.com—17
us-std-00001.s3.dualstack.us-east-1.amazonaws.com—17
wig-am.waze.com—17
ws.chatgpt.com—17
www.delta.com—17
www.google.co.kr—17
www.google.com.hk—17
xp.apple.com—17
zndhztugwqhlulqht-aexpfeedback.siteintercept.qualtrics.com—17
usmia1.icloud-content.com—16
s-gke-usc1-nssi4-16.firebaseio.com—15
1.datadog.pool.ntp.org—14
11-app-mop.meshare.com—14
11-mng-mop.meshare.com—14
11-upgrade-mop.meshare.com—14
11-vdr-mop.meshare.com—14
12-alarm-mop.meshare.com—14
13-alarm-mop.meshare.com—14
14-alarm-mop.meshare.com—14
9zswv8.cdn-settings.appsflyersdk.com—14
9zswv8.launches.appsflyersdk.com—14
a4091a3a2309.cdn4.forter.comForter Inc.14
a5lng2.cdn-settings.appsflyersdk.com—14
a5lng2.launches.appsflyersdk.com—14
aaaa.oss-accelerate.aliyuncs.com—14
ablink.email.rocketmoney.com—14
ac.opentable.com—14
account.booking.com—14
acs-mum-global.alibaba.com—14
acs.aliexpress.com—14
acs.m.alibaba.com—14
adashx.m.taobao.com—14
adashx4ae.ut.taobao.com—14
adf0901f1861.cdn4.forter.comForter Inc.14
ads.vungle.comVungle Inc14
adsplus-p.oss-accelerate.aliyuncs.com—14
adsplus.cn-guangzhou.log.aliyuncs.com—14
ae-pic-a1.aliexpress-media.com—14
aimg-1.kwcdn.com—14
aimg-2.kwcdn.com—14
air.alibaba.com—14
alivc-aio.cn-hangzhou.log.aliyuncs.com—14
am-v1.presage.io—14
amdc.alibaba.com—14
amdc.aliexpress.com—14
amp-api-edge.music.apple.com—14
amp-api.music.apple.com—14
amp-api.podcasts.apple.com—14
analytics.adjust.net.in—14
api-adservices.apple.com—14
api-meet.ringcentral.com—14
api-mucc.ringcentral.com—14
api.accuweather.com—14
api.alltheapps.org—14
api.amplitude.comAmplitude14
api.dropbox.com—14
api.events.rocketmoney.com—14
api.ipgeolocation.io—14
api.iterable.comIterable, Inc.14
api.kickstarter.com—14
api.lab.amplitude.com—14
api.lyft.bitdrift.io—14
api.lyft.com—14
api.paypal.com—14
api.snapkit.com—14
api.swrve.comSwrve Inc.14
api.tripadvisor.com—14
api.weather.com—14
api.whatsapp.net—14
api2.amplitude.comAmplitude14
apis.reolink.com—14
apisd.ebay.com—14
app-gamma.glip.com—14
app-openapi-us-pr.eufy.com—14
app-push-us-pr.eufy.com—14
app.bestbuy.com—14
app.meshare.com—14
app.payoneer.com—14
app.ringcentral.com—14
applecommerce-pa.googleapis.com—14
apps.rokt.com—14
arup-m.alibaba.com—14
arup-m.aliexpress.com—14
ashburn.performaized.com—14
ashburn.va.speedtest.frontier.com—14
assets-jpcust.jwpsrv.com—14
assets.alicdn.com—14
assets.aliexpress-media.com—14
assets.grammarly.com—14
attest.approovr.io—14
attest.perplexity.ai—14
attgaook.speedtest.sbcglobal.net—14
audid-api.taobao.comAlibaba Group14
aura.yelp.com—14
auth.openai.com—14
auth.rocketaccount.com—14
auth.svcs.verizon.com—14
auth.trivago.com—14
auth.uber.com—14
authentication-manager.gocurb.com—14
auto-api.yelp.com—14
autosug.ebay.com—14
avatar.us.kwcdn.com—14
azure-na-cdn.contentstack.com—14
blog.bankofamerica.com—14
bookkeeper.itunes.apple.com—14
bugly.qq.comTencent Holdings Ltd.14
bunsen.yelp.com—14
bup.bankofamerica.com—14
bztld4-cdn-settings.appsflyersdk.com—14
bztld4-launches.appsflyersdk.com—14
c.paypal.com—14
c.riskified.comRiskified Ltd.14
c00093-dl.urbanairship.com—14
capi.connatix.com—14
capi.grammarly.com—14
cdl-1.kwcdn.com—14
cdl-2.kwcdn.com—14
cdl.kwcdn.com—14
cdn-hs-graphql-dus.trivago.com—14
cdn-hs-graphql-sfo.trivago.com—14
cdn-settings.segment.com—14
cdn.apple-mapkit.com—14
cdn.jwplayer.com—14
cdn.lyft.com—14
cdn.taboola.com—14
cdn1.bettersleep.com—14
cdn1.ipnoscloud.com—14
cdn2.ookla.com—14
certificates.godaddy.com—14
cf.bstatic.com—14
cfg.kwcdn.com—14
client-api.itunes.apple.com—14
client-api.rocketmoney.com—14
client.cardinaltrusted.com—14
cloud-config-service.rtc.aliyuncs.com—14
cloudflare-dns.com—14
cmsdk.cardinalcommerce.com—14
cn-cloudflare.pidetupop.com—14
cn-dc1.uber.com—14
cn-dca1.cfe.uber.com—14
cn-dca1.uber.com—14
cn-geo1.uber.com—14
collect.riskid.security—14
collector-pxhyx10rg3.perimeterx.net—14
com-amazon-amazonbusiness.triggers-v1.prod.mobile.weblab.a2z.com—14
commimg-1.kwcdn.com—14
config.emb-api.comEmbrace Mobile, Inc.14
consumer-downdetector-api.speedtest.net—14
counter.pushauction.com—14
crosell.datacaciques.com—14
curb-mobile-assets.s3.amazonaws.com—14
cwf-speedtest-se.clearwave.com—14
d.applovin.com—14
d15e55tqlrbrds.cloudfront.net—14
d1a3f4spazzrp4.cloudfront.net—14
d1ghe043m1zc2y.cloudfront.net—14
d1vi3mu7ljhkg.cloudfront.net—14
d4p17acsd5wyj.cloudfront.net—14
d8c14d4960ca.edge.sdk.awswaf.com—14
data.emb-api.comEmbrace Mobile, Inc.14
deals.allegiantair.com—14
dha4fs.payoneer.com—14
dl.kwcdn.com—14
drive.google.com—14
dynamic-media-cdn.tripadvisor.com—14
ecom-api.costco.com—14
edcs.ringcentral.com—14
edge-024.usbos2.icloud-content.com—14
edge-033.usuyk1.icloud-content.com—14
edge-217.usuyk1.icloud-content.com—14
edge-230.usmia1.icloud-content.com—14
edge-237.usuyk1.icloud-content.com—14
edge-249.usuyk1.icloud-content.com—14
edge-256.usmia1.icloud-content.com—14
edge-271.usuyk1.icloud-content.com—14
edr.ringcentral.com—14
efleet.gocurb.com—14
ellsworth.from-ks.com—14
entitlements-edge.itunes.apple.com—14
eos-webview.uber.com—14
eu-aa.online-metrix.net—14
evs.events.rocketmoney.com—14
experiment-allocation.yelp.com—14
fds.apple.com—14
fel-api.prod.browse.bestbuy.com—14
firebaseinappmessaging.googleapis.com—14
fiverr-res.cloudinary.com—14
fl.speedtest.openinfra.com—14
flag.lab.amplitude.com—14
fn7uqp.cdn-settings.appsflyersdk.com—14
fn7uqp.inapps.appsflyersdk.com—14
fn7uqp.launches.appsflyersdk.com—14
fraud-api.dyneti.com—14
frontend-cdn.perplexity.ai—14
fscdn.eppo.cloud—14
fundingchoicesmessages.google.com—14
g.whatsapp.net—14
gapi.waze.com—14
gate.datacaciques.com—14
gateway.facebook.com—14
gateway.grammarly.com—14
gcp-img.slatic.net—14
gdx-api-mobileapps.costco.com—14
gdx-api.costco.com—14
gdx-assets.costco.com—14
global-orange-dc.alibaba.com—14
global-orange-dc.aliexpress.com—14
goods-vod.kwcdn.com—14
graph.instagram.com—14
graphql-mobile-api.yelp.com—14
gspe76-ssl.ls.apple.com—14
gtm.trivago.com—14
gtp-app-dot-b-ppc-app-prod-u2xv6z.ew.r.appspot.com—14
guce.oath.com—14
gv-vod-cdn.aliexpress-media.com—14
h-adashx.ut.alibaba.com—14
h-adashx4ae.ut.taobao.com—14
h.costco.com—14
home-cdn.reolink.us—14
hvixb1-cdn-settings.appsflyersdk.com—14
hvixb1-launches.appsflyersdk.com—14
i.ebayimg.cn—14
i.ebayimg.com—14
i.instagram.com—14
i.kickstarter.com—14
i.travelapi.com—14
i.ytimg.com—14
i9wkmk-cdn-settings.appsflyersdk.com—14
i9wkmk-launches.appsflyersdk.com—14
iad-03.braze.comBraze, Inc.14
iadcontent.apple.com—14
iadctest.qwapi.com—14
iadctestus.qwapi.com—14
iclientgw.alipay.com—14
iid.googleapis.com—14
image.pushauction.com—14
imap.gmail.com—14
imc2.csid.us—14
img-1.kwcdn.com—14
img-2.kwcdn.com—14
img.alicdn.com—14
img.riskified.com—14
imgcy.trivago.com—14
in.grammarly.com—14
init.itunes.apple.com—14
ios.femetrics.grammarly.io—14
ita.emr.entersekt.com—14
journey.gocurb.com—14
known-issues.apple.com—14
l.contentsquare.net—14
ld-events.payoneer.com—14
ld-polling.payoneer.com—14
live.us.shoplive.cloud—14
locale.temu.com—14
login.live.com—14
login.microsoftonline.com—14
login.payoneer.com—14
lws-icbu.dingtalk.com—14
m.csqtrk.net—14
m.trip.com—14
m1-us.iotbing.com—14
mapi.speedtest.net—14
mapping.lyft.com—14
mdtb-cf-2.ads.aps.amazon-adsystem.com—14
media-cdn.costco.com—14
metricreceiver.cellrebel.com—14
miami.fl.speedtest.frontier.com—14
mobifts.ebay.com—14
mobile-api.fiverr.com—14
mobile-api.opentable.com—14
mobile-api.yelp.com—14
mobile-apps.booking.com—14
mobile-collector.newrelic.comNew Relic14
mobile-config.ring.com—14
mobile-content.uber.com—14
mobile-gw.spot.im—14
mobile-production.content-square.net—14
mobile.events.data.microsoft.com—14
mobile.fiverr.com—14
mobileapi.gocurb.com—14
mobileapi.speedtest.net—14
mobileappcommunicator.auth.microsoft.com—14
mobilecontent.costco.com—14
mobilecontentdev.costco.com—14
mobileonenexus.americanexpress.com—14
mobiletelemetry.ebay.com—14
moxie.foxnews.com—14
mparticle.weather.com—14
ms.applovin.com—14
mservice.bankofamerica.com—14
msg-global.m.taobao.com—14
msgacs.m.alibaba.com—14
mum-global.alibaba.com—14
myaccount.payoneer.com—14
myspeed.giantcomm.net—14
mzstorekit-sb.itunes.apple.com—14
news-app-events.apple.com—14
news-client.apple.com—14
news-edge.apple.com—14
news-events.apple.com—14
news-sports-events.apple.com—14
news-todayconfig-edge.apple.com—14
newsletter-edge.apple.com—14
npm-assets.fiverrcdn.com—14
ntfy.gdfsecurity.com—14
ntp.aliyun.com—14
nypost.com—14
nypost.nypost.djservices.io—14
o565714.ingest.sentry.ioFunctional Software, Inc.14
obapi-api.optum.com—14
ocsp.rootca1.amazontrust.com—14
ocsp2.globalsign.com—14
odm.app-ads-services.com—14
ona83f.cdn-settings.appsflyersdk.com—14
ona83f.launches.appsflyersdk.com—14
online.americanexpress.com—14
ontology.health.apple.com—14
ookla.a56.as6453.net—14
ookla2.eaglecable.net—14
otel-gw.booking.com—14
outlook.office365.com—14
p1.parsely.com—14
p167-content.icloud.com—14
p167-mcc.icloud.com—14
p167-mccgateway.icloud.com—14
p168-content.icloud.com—14
p30-mcc.icloud.com—14
p51efdfh-ios.mobile-messenger.intercom.com—14
pcpassets.payoneer.com—14
pdp.aliexpress-media.com—14
pfse-u.file.temu.com—14
pftka-us.temu.com—14
phoots.strava.com—14
pisces.bbystatic.com—14
platform-lookaside.fbsbx.com—14
prebid-server.rubiconproject.com—14
prod-1.us-east-1.mdcs.mshop.amazon.dev—14
provider-api.health.apple.com—14
pushx.reolink.com—14
px-intl.ucweb.com—14
q-xx.bstatic.com—14
r-xx.bstatic.com—14
redirector.googlevideo.com—14
relax-melodies-android.firebaseio.com—14
research.apple.com—14
resizer.otstatic.com—14
resolver-icbu.dingtalk.com—14
robinfrontend-pa.googleapis.com—14
rr1---sn-vgqsknzd.googlevideo.com—14
rr1---sn-vgqsrnzy.googlevideo.com—14
rr2---sn-uhvcpax0n5-4gbd.googlevideo.com—14
rr3---sn-vgqsknzs.googlevideo.com—14
rr3---sn-vgqsrn67.googlevideo.com—14
rr5---sn-vgqsrnzz.googlevideo.com—14
rr7---sn-uhvcpax0n5-4gb6.googlevideo.com—14
rr8---sn-uhvcpax0n5-4gb6.googlevideo.com—14
rt.applovin.com—14
rt2.fiverr.com—14
s-gke-usc1-nssi2-52.firebaseio.com—14
s-gke-usc1-nssi2-53.firebaseio.com—14
s.alicdn.com—14
s.w-x.co—14
s.wayfair.com—14
s.youtube.com—14
s3-media0.fl.yelpcdn.com—14
sac.nypost.com—14
sale.alibaba.com—14
samizdat-graphql.nytimes.com—14
sas.pcms.apple.com—14
sb.music.apple.com—14
sc04.alicdn.com—14
scontent-cgk1-1.xx.fbcdn.net—14
scontent-lga3-2.xx.fbcdn.net—14
scontent-mia3-3.xx.fbcdn.net—14
scontent-mia5-1.xx.fbcdn.net—14
scontent-mia5-2.xx.fbcdn.net—14
scontent-msp1-1.xx.fbcdn.net—14
sdk-04.moengage.com—14
sdk-api-v1.singular.netSingular Labs, Inc.14
sdk-assets.teads.tv—14
sdk.iad-07.braze.com—14
sdk.mb1.mycardplace.com—14
se-edge.itunes.apple.com—14
secure-mobile-apps.booking.com—14
secure.globalsign.com—14
secure.img1-fg.wfcdn.com—14
seller-acs.aliexpress.com—14
sentry.io—14
sequoia.cdn-apple.com—14
sessions.bugsnag.comBugsnag Inc.14
sf16-sg.tiktokcdn.com—14
signaler-pa.googleapis.com—14
signin.costco.com—14
sip121-1121.ringcentral.com—14
sip131-1111.ringcentral.com—14
skan-s2s.singular.net—14
slsrole.alicdn.com—14
smp-device-content.apple.com—14
sp.yelp.com—14
speedtest-atl.conexonconnect.com—14
speedtest-coda.noc.gatech.edu—14
speedtest-ict.ideatek.com—14
speedtest.chisholmbb.com—14
speedtest.gsu.edu—14
speedtest.homecomminc.com—14
speedtest.kuducom.com—14
speedtest.mtc4me.com—14
speedtest.net.usf.edu—14
speedtest.optyxbroadband.com—14
speedtest.tctelco.net—14
speedtest.tpa1.hivelocity.net—14
speedtest.us-at.kamatera.com—14
speedtest03.bluestreamfiber.net—14
speedtest1.atl1-us.gozfly.net—14
speedtest10g.tpa.as13760.net—14
speedtest14.point-broadband.com—14
speedtest2-wichita.kanren.net—14
speedtestatl.gethotwired.com—14
speedtestnet.rapidsys.com—14
sr-client-cfg.amplitude.com—14
src.ebay-us.com—14
ssgtm-sbyzlt5hyq-ey.a.run.app—14
st.downdetectorapi.com—14
static-1.kwcdn.com—14
static-2.kwcdn.com—14
static.criteo.net—14
static.tacdn.com—14
staticassets-creator-design.criteo.net—14
stcblink.nypost.com—14
stocks-analytics-events.apple.com—14
stocks-data-service.apple.com—14
stocks-edge.apple.com—14
storage.live.com—14
streams.bestbuy.com—14
suggestqueries.google.com—14
survey.qualtrics.com—14
sy.presage.io—14
t-cf.bstatic.com—14
t.nypost.com—14
t.pushauction.com—14
t.seenthis.se—14
tampfl-speedtest-ookla-01.st.charter.com—14
tb-static.uber.com—14
tc2.uber.com—14
thtka-us.temu.com—14
tiles.zoom.earth—14
tilt-ws.bankofamerica.com—14
tpataspeedtest.wiline.com—14
trk.mgs.opentable.com—14
u.expo.dev—14
umlazada.alibaba.com—14
upsx.weather.com—14
us-ds.temu.com—14
us-ummt.alibaba.com—14
us.temu.com—14
us.ynuf.aliapp.org—14
us1-spiky.clevertap-prod.com—14
us1.clevertap-prod.com—14
usbos2.icloud-content.com—14
user-api.speedtest.net—14
user.zmodo.com—14
v.w-x.co—14
venue-image.waze.com—14
video.aliexpress-media.com—14
video.seenthis.se—14
videocloud.cn-hangzhou.log.aliyuncs.com—14
vntsnotificationservice.visa.com—14
vodexp.ebay.com—14
vovud4.cdn-settings.appsflyersdk.com—14
vovud4.launches.appsflyersdk.com—14
vpn-api.proton.me—14
vpp-license-proxy.aliyuncs.com—14
way2i.gocurb.com—14
weather-analytics-events.apple.com—14
weather-edge.apple.com—14
weather.com—14
webproxy.advp.apple.com—14
wellington-speedtest.connectwithusa.com—14
whatismyip.proveapis.com—14
www.aliexpress.com—14
www.allegiantair.com—14
www.awxcdn.com—14
www.bac-assets.com—14
www.bestbuy.com—14
www.booking.com—14
www.expedia.com—14
www.hotels.com—14
www.instagram.com—14
www.kayak.com—14
www.kickstarter.com—14
www.linkedin.com—14
www.payoneer.com—14
www.paypal.com—14
www.perplexity.ai—14
www.speedtest.net—14
www.youtube.com—14
x.ss2.us—14
xx.bstatic.com—14
yclqkn.cdn-settings.appsflyersdk.com—14
yclqkn.launches.appsflyersdk.com—14
youtube.com—14
youtubei.googleapis.com—14
yrl7yj.cdn-settings.appsflyersdk.com—14
yrl7yj.launches.appsflyersdk.com—14
yt3.ggpht.com—14
zconfig.alibabausercontent.com—14
zncviucggbawcrwdo-payoneer.siteintercept.qualtrics.com—14
*.appsync-realtime-api.us-east-1.amazonaws.com (hostname family)—13
*.oaiusercontent.com (hostname family)—13
5infdg.inapps.appsflyersdk.com—13
a-api.anthropic.com—13
a-cdn.anthropic.com—13
a.co—13
a0.muscache.com—13
addons-pa.googleapis.com—13
advertising.walmart.com—13
analytics.mobile.walmart.com—13
api.github.com—13
api.protonmail.ch—13
api.theepochtimes.com—13
app-media.x.ai—13
apps.pingone.com—13
appsgenaiserver-pa.googleapis.com—13
appsgrowthpromo-pa.googleapis.com—13
arcore.googleapis.com—13
asset.chase.com—13
assets.claude.ai—13
assets.grok.com—13
avatars.githubusercontent.com—13
bf65110taw.bf.dynatrace.com—13
bf84553kkn.bf.dynatrace.com—13
buy.itunes.apple.com—13
cafe.github.com—13
captive.apple.com—13
cdn-f.adsmoloco.comMoloco Inc.13
cdn.ampproject.org—13
cdn.auth0.com—13
cdn.fbsbx.com—13
cdn.teads.tv—13
cdn.zimperium.com—13
cell8003.iad.mobile.bid-na.ads.aps.amazon-adsystem.com—13
chatgpt.com—13
ci3.googleusercontent.com—13
claude.ai—13
clients4.google.com—13
clienttracing-pa.googleapis.com—13
cloudidentity.googleapis.com—13
cloudsearch.googleapis.com—13
collection.decibelinsight.net—13
collector-pxuarm9b04.perimeterx.net—13
commerce16-normal-us-ttp.capcutapi.us—13
config.mtp.sag.us-ashburn-1.oci.oraclecloud.com—13
connect.facebook.net—13
connectivitycheck.gstatic.com—13
delta.data.adobedc.net—13
device.payfone.com—13
digital-cloud-prem.apis.medallia.com—13
discover-pa.googleapis.com—13
drfdisvc.walmart.com—13
drivefrontend-pa.googleapis.com—13
drivelabels.googleapis.com—13
edge-003.usuyk1.icloud-content.com—13
edge-011.usmes1.icloud-content.com—13
edge-031.usbos2.icloud-content.com—13
edge-034.usuyk1.icloud-content.com—13
edge-046.usmia1.icloud-content.com—13
edge-080.usbos2.icloud-content.com—13
edge-082.usuyk1.icloud-content.com—13
edge-090.ussea3.icloud-content.com—13
edge-116.usmia1.icloud-content.com—13
edge-148.usmia1.icloud-content.com—13
edge-176.usuyk1.icloud-content.com—13
edge-227.usuyk1.icloud-content.com—13
edge-235.usuyk1.icloud-content.com—13
edge-249.usmia1.icloud-content.com—13
edge-255.usuyk1.icloud-content.com—13
edge-270.usmia1.icloud-content.com—13
edge-283.usmia1.icloud-content.com—13
editor16-normal-us-ttp2.capcutapi.us—13
egv4py1c-ios.mobile-messenger.intercom.com—13
encrypted-tbn1.gstatic.com—13
epochtimeshzek.dataplane.rudderstack.com—13
evercloud16-normal-us-ttp.capcutapi.us—13
evercloud16-normal-us-ttp2.capcutapi.us—13
external-bos5-1.xx.fbcdn.net—13
external-ord5-3.xx.fbcdn.net—13
fcmtoken.googleapis.com—13
feed16-normal-us-ttp.capcutapi.us—13
feed16-normal-us-ttp2.capcutapi.us—13
feedback-pa.googleapis.com—13
fp.pipopayment.us—13
frontier-us-ttp2.capcutw.us—13
gcs-eu-00002.content-storage-upload.googleapis.com—13
gecko16-normal-us-ttp2.capcutapi.us—13
geller-pa.googleapis.com—13
genai-graph.facebook.com—13
gql.music.amazon.dev—13
graph-fallback.facebook.com—13
grok.com—13
gspe11-ssl.ls.apple.com—13
gto-ocp.icproxy.secp.c1.vanguard.com—13
gw.geoedge.be—13
gz.gstatic.com—13
gz0.googleusercontent.com—13
i.l-dsp.inmobicdn.net—13
i16-normal-us-ttp2.capcutapi.us—13
i5.walmartimages.com—13
images.salsify.com—13
imagine-public.x.ai—13
img.theepochtimes.com—13
inbox.google.com—13
ios-mdm.googleusercontent.com—13
is3-ssl.mzstatic.com—13
is4-ssl.mzstatic.com—13
is5-ssl.mzstatic.com—13
ismmyx.cdn-settings.appsflyersdk.com—13
ismmyx.launches.appsflyersdk.com—13
lf16-beecdn-row.capcutcdn-us.com—13
lf16-beecdn.ibytedtos.com—13
lf16-effectcdn-row.capcutcdn-us.com—13
lf16-effectcdn-us.tiktokcdn-us.com—13
lf16-faceu-file-sign.capcutcdn-us.com—13
lf16-geckocdn.tiktokcdn-us.com—13
lf19-geckocdn.tiktokcdn-us.com—13
lh5.googleusercontent.com—13
lh6.googleusercontent.com—13
lh7-rt.googleusercontent.com—13
locationhistory-pa.googleapis.com—13
locationhistoryplacedetails-pa.googleapis.com—13
log16-normal-us-ttp2.capcutapi.us—13
m.clientaccessapi.rjf.com—13
mail-api.proton.me—13
mail-attachment.googleusercontent.com—13
mail.google.com—13
maps.gstatic.com—13
mcl4db470h-*.device.marketingcloudapis.com (hostname family)—13
mds.prod.walmartimages.com—13
meetings.googleapis.com—13
mobile.eum-appdynamics.com—13
mobile.facebook.com—13
mobile.vanguard.com—13
mobilemaps-pa-gz.googleapis.com—13
mobilemaps.googleapis.com—13
mon16-normal-us-ttp2.capcutapi.us—13
mpi-prod.zimperium.com—13
mpiprod-cdn.zimperium.com—13
mssdk16-normal-us-ttp2.capcutapi.us—13
music.amazon.com—13
mybmwapp.caas.bmw—13
notes-analytics-events.apple.com—13
o1158394.ingest.us.sentry.io—13
ocsp.r2m04.amazontrust.com—13
odc.officeapps.live.com—13
odr.itunes.apple.com—13
ogads-pa.googleapis.com—13
ort.wellsfargo.com—13
p16-capcut-sign-useast5.capcutcdn-us.com—13
p16-capcut-sign-useast8.capcutcdn-us.com—13
p16-common.tiktokcdn-us.com—13
p16-heycan-file-sign.capcutcdn-us.com—13
p16-heycan-image-sign.capcutcdn-us.com—13
p16-ulike.capcutcdn-us.com—13
p176-content.icloud.com—13
p176-quota.icloud.com—13
p19-capcut-sign-useast8.capcutcdn-us.com—13
p19-common.tiktokcdn-us.com—13
passport16-normal-us-ttp2.capcutapi.us—13
pixel.adsafeprotected.com—13
powerslave.com—13
prod.us.ecp.bmw.cloud—13
proxy.telemetry.us-ashburn-1.oci.oraclecloud.com—13
pwe.epochbase.com—13
reco.chase.com—13
resources.digital-cloud-prem.medallia.com—13
restrictedapps-pa.googleapis.com—13
rr1---sn-hp57ynlr.googlevideo.com—13
rr3---sn-hp57yns6.googlevideo.com—13
rr4---sn-hp57kndk.googlevideo.com—13
rumcdn.geoedge.be—13
rupload.facebook.com—13
s.xlgmedia.com—13
sac.presage.io—13
scontent-atl3-2.xx.fbcdn.net—13
scontent-dfw5-1.xx.fbcdn.net—13
scontent-dfw5-2.xx.fbcdn.net—13
scontent-dfw6-1.xx.fbcdn.net—13
scontent-dfw6-2.xx.fbcdn.net—13
scontent-hou1-1.xx.fbcdn.net—13
scontent-iad3-1.xx.fbcdn.net—13
scontent-iad6-1.xx.fbcdn.net—13
scontent-mia3-1.cdninstagram.com—13
scontent-mia3-1.xx.fbcdn.net—13
scontent-mia3-2.cdninstagram.com—13
scontent-mia5-1.cdninstagram.com—13
scontent-ord5-1.xx.fbcdn.net—13
scontent-ord5-2.xx.fbcdn.net—13
scontent-ord5-3.xx.fbcdn.net—13
sdk.iad-04.braze.com—13
sdk.iad-08.braze.com—13
sdmntprcentralus.oaiusercontent.com—13
sdmntpreastus2.oaiusercontent.com—13
sdmntprnorthcentralus.oaiusercontent.com—13
sdmntprsouthcentralus.oaiusercontent.com—13
sdmntprwestcentralus.oaiusercontent.com—13
sdmntprwestus.oaiusercontent.com—13
sdmntprwestus2.oaiusercontent.com—13
sdmntprwestus3.oaiusercontent.com—13
searchlabspartnerservice-pa.googleapis.com—13
secure.chase.com—13
securitydomain-pa.googleapis.com—13
sf-i18n-resources.tiktokcdn-us.com—13
sf16-ttcdn-row.capcutcdn-us.com—13
sf16-web-tos-buz.capcutcdn-us.com—13
sites.chase.com—13
smetrics.delta.com—13
static-assets-1.truthsocial.com—13
static-bos5-1.xx.fbcdn.net—13
static-ord5-3.xx.fbcdn.net—13
static.adsafeprotected.com—13
static.chase.com—13
static2.chasecdn.com—13
streetviewpixels-pa.googleapis.com—13
subscriptionsmobile-pa.googleapis.com—13
taskassist-pa.googleapis.com—13
tasks-pa.googleapis.com—13
tnc16-normal-us-ttp2.capcutapi.us—13
trace.app-performance.music.amazon.dev—13
traffic.outbrain.com—13
truthsocial.com—13
us-ore-00001.s3.dualstack.us-west-2.amazonaws.com—13
uslax2.icloud-content.com—13
v16-capcut.capcutcdn-us.com—13
v19-capcut.capcutcdn-us.com—13
vanguard.data.adobedc.net—13
video-dfw5-1.xx.fbcdn.net—13
video-dfw5-2.xx.fbcdn.net—13

Sensor & data access

What iOS itself records apps touching. Each resource links to a page explaining what that access means and which apps were measured doing it.

ResourceAppsWhat it means
Contacts9The app read your address book — names, numbers and emails of people who never agreed to anything. Contact lists are the classic seed for social-graph building.
Photos9The app reached into your photo library. Photos carry faces, documents, and often GPS coordinates in their metadata.
Camera5The app activated the camera. iOS logs the access, not the footage — a count says how often, not what was seen.
Microphone4The app activated the microphone. Frequent access by an app with no voice feature is worth a hard look.
Location4The app asked where you are. Repeated over time, location becomes a movement history: home, work, clinic, place of worship.
Media library—The app read your Apple Media library — what music and media you own, a durable taste profile.
Screen recording—The app captured screen contents. Anything visible was capturable, including other apps' text.
Calendars—The app read your calendar — who you meet, when, and often where and why.
Reminders—The app read your reminders, which are frequently to-do lists of private business.
Motion & fitness—The app read motion and fitness data — step counts and movement patterns, which can imply health status.

Donate your own App Privacy Report — it's anonymous →