← App Privacy Database

Measured in the wild

Apps and domains with corroborated evidence from donated App Privacy Reports, published under human verdicts.

Everything on this page cleared two gates: it was observed in at least 3 separate accepted donations, and it publishes only under a human verdict — a reviewer approves each app's evidence, and rows arriving later for that app inherit the decision (marked on the app's page). This is the measured layer of the App Privacy Database — not what apps declare, but what donors' iPhones recorded them doing.

Apps with measured evidence

AppNetwork findingsSensor findings
Speedtest by Ookla71
Facebook451
Booking.com: Hotels & Travel42
Fly Delta42
AliExpress - Shopping App38
Google Maps371
YouTube38
Gmail35
ChatGPT311
eBay online shopping & selling31
Phone by Google292
Alibaba.com - B2B marketplace30
Expedia: Hotels, Flights, Cars30
The Weather Channel26
Costco Wholesale25
Rocket Money - Bills & Budgets24
Temu24
Amazon Shopping23
Google Gemini22
Waze211
Amazon Business: B2B Shopping21
Google (Search)21
My BMW21
OpenTable20
AccuWeather19
Grok AI181
Tripadvisor: Plan & Book Trips19
Walmart19
Amex18
Uber18
PayPal - Pay, Send, Save17
Curb - Request & Pay for Taxis16
trivago: Compare hotel prices16
Chase Mobile15
Claude by Anthropic14
Kickstarter14
Messages104
Allegiant13
Instagram111
Bank of America Mobile Banking10
Lyft10
Zoom Earth - Weather Forecast9
GitHub8
Google Authenticator71
Apple Music7
Microsoft Authenticator7
Amazon Music: Songs & Podcasts6
Proton Mail: Encrypted Email51
Weather app6
Air France - Book a flight4
KLM - Book a flight4
Truth Social4
Messenger3
Reolink3
KAYAK: Flights, Hotels & Cars2
Microsoft Outlook2
Proton VPN: Fast & Secure VPN2
Telegram2
Wayfair - Shop All Things Home2
WhatsApp2
Afterpay: Pay over time1
Airbnb1
Contacts1
IMDb: Movies & TV Shows1
LinkedIn1
Microsoft 365 Copilot1
Strava: Run, Bike, Walk1
TikTok1
Trip.com: Book Flights, Hotels1
Wells Fargo Mobile®1

Domains observed

Ordered by reach: how many measured apps contact each domain. Every domain links to its own page — who operates it, what our research panel concluded, and every app tied to it.

DomainOwnerAppsDonations
firebaseinstallations.googleapis.com37148
app-analytics-services.com34134
firebase-settings.crashlytics.comGoogle LLC32131
firebaselogging-pa.googleapis.comGoogle LLC27110
mzstorekit.itunes.apple.com2084
inappcheck.itunes.apple.com1967
ocsp.digicert.com1663
ocsp2.apple.com1663
firebaseremoteconfig.googleapis.comGoogle LLC1565
mask.icloud.com1557
amp-api-edge.apps.apple.com1460
bag.itunes.apple.com1363
gateway.icloud.com1363
gsp-ssl.ls.apple.com1361
mobile-data.onetrust.io1143
www.googleapis.com1043
lh3.googleusercontent.com1038
gspe19-2-ssl.ls.apple.com950
gspe19-ssl.ls.apple.com950
play.googleapis.com940
oauthaccountmanager.googleapis.com936
device-provisioning.googleapis.com935
fpinit.itunes.apple.com834
graph.facebook.comFacebook, Inc.834
ep2.facebook.com832
googleads.g.doubleclick.netGoogle LLC832
oauth2.googleapis.com832
people-pa.googleapis.com831
assets.adobedtm.com733
www.google.com732
crashlyticsreports-pa.googleapis.comGoogle LLC730
pubads.g.doubleclick.netGoogle LLC728
cdn.cookielaw.org727
setup.icloud.com727
events.mapbox.com726
metrics.icloud.com636
sc.omtrdc.netAdobe Inc.630
clients3.google.com626
firebaseremoteconfigrealtime.googleapis.com626
analytics.adjust.com623
config.mapbox.com622
is1-ssl.mzstatic.com526
configuration.apple.com521
g.doubleclick.netGoogle LLC520
api.mapbox.com519
api.mixpanel.comMixpanel, Inc.519
tpc.googlesyndication.com519
notifications-pa.googleapis.com517
itunes.apple.com421
api.revenuecat.comRevenueCat419
apps.mzstatic.com419
entitlements.itunes.apple.com419
dpm.demdex.netAdobe Inc.418
census-app-x.scorecardresearch.com416
device.marketingcloudapis.comSalesforce.com, Inc.416
muf.app-ads-services.com416
odf.app-ads-services.com416
securepubads.g.doubleclick.netGoogle LLC416
ssl.google-analytics.comGoogle LLC416
*.ingest.us.sentry.io (hostname family)415
bf.dynatrace.comDynatrace LLC415
accountcapabilities-pa.googleapis.com414
usuyk1.icloud-content.com318
gcs-us-00003.content-storage-upload.googleapis.com317
gspe21-ssl.ls.apple.com317
pancake.apple.com316
config.edge.skype.com315
ingest.sentry.ioFunctional Software, Inc.315
m.media-amazon.com315
mapsmobilesdks-pa.googleapis.com315
web.facebook.comFacebook, Inc.315
*.us-east-1.prod.service.minerva.devices.a2z.com (hostname family)314
api.ipify.org312
browser-intake-datadoghq.comDatadog, Inc.312
cdn.forter.comForter Inc.312
cdn4.forter.comForter Inc.312
iad-06.braze.comBraze, Inc.312
m.api.forter.com312
scontent-mia3-2.xx.fbcdn.net312
skan.singular.net312
weatherkit.apple.com312
www.app-ads-services.com312
www.googletagmanager.comGoogle LLC312
www.paypalobjects.com312
aa.online-metrix.net311
api3.branch.io311
cdn.branch.io311
h64.online-metrix.net311
ocsp.godaddy.com311
storage.googleapis.com311
accounts.google.com310
attester.gateway.icloud.com310
growth-pa.googleapis.com310
ssl.gstatic.com310
www.gstatic.com310
edge-222.usmia1.icloud-content.com39
*-netseer-ipaddr-assoc.xz.fbcdn.net (hostname family)214
api.facebook.com214
edge-097.usmia1.icloud-content.com212
*.appsync-api.us-east-1.amazonaws.com (hostname family)211
api-production.8-lives-cat.io211
api.amazon.com211
api.mshop.bdtelemetry.amazon211
arcus-uswest.amazon.com211
data.adobedc.netAdobe Inc.211
data.amazon.com211
difbymfufwhaj.cloudfront.net211
dyqv1d0rgwsrm.cloudfront.net211
featureassets.org211
firebaseappcheck.googleapis.com211
init-p01md.apple.com211
init.ess.apple.com211
msh.amazon.com211
prime.amazon.com211
prodregistryv2.org211
s.mzstatic.com211
session.mshopbugsnag.irm.amazon.dev211
trace.mshopbugsnag.irm.amazon.dev211
transient.amazon.com211
unagi-na.amazon.com211
us-prod-temp.s3.amazonaws.com211
www.aexp-static.com211
www.amazon.com211
www.americanexpress.com211
www.facebook.comFacebook, Inc.211
*-expediaxm.siteintercept.qualtrics.com (hostname family)28
0.datadog.pool.ntp.org28
2.datadog.pool.ntp.org28
a.travel-assets.com28
a1-us.iotbing.com28
acs.m.taobao.com28
api-m.paypal.com28
api-mobile.airfranceklm.com28
api-sdk.datadome.coDataDome28
api.sprig.com28
braze-images.com28
c.amazon-adsystem.com28
c.apple.news28
clickstream-event-manager-service.test.expedia.com28
combine.urbanairship.comUrban Airship, Inc.28
device-api.urbanairship.comUrban Airship, Inc.28
ec.pcms.apple.com28
edge-103.usbos2.icloud-content.com28
firestore.googleapis.com28
forever.travel-assets.com28
g.alicdn.com28
global-orange-source.alibaba.com28
gw.alicdn.com28
icm.aexp-static.com28
images.trvl-media.com28
in.appcenter.msMicrosoft Corporation28
mads.amazon-adsystem.comAmazon Technologies, Inc.28
mobile-api.rokt.com28
news-assets.apple.com28
news.iadsdk.apple.com28
pagead2.googlesyndication.comGoogle LLC28
ps.pndsn.com28
remote-data.urbanairship.com28
s.amazon-adsystem.com28
sf-api-token-service.itunes.apple.com28
stats.paypal.comPayPal, Inc.28
time.apple.com28
tr.iadsdk.apple.com28
us.criteo.comCriteo SA28
wvcfg.alicdn.com28
3.datadog.pool.ntp.org27
ad.doubleclick.net27
api.segment.ioSegment.io, Inc.27
api3.siftscience.comSift Science, Inc.27
browser-intake-us5-datadoghq.com27
cacerts.digicert.com27
chat-e2ee.facebook.com27
d1imosqlhij19v.cloudfront.net27
dns.google27
dns.quad9.net27
edge-061.usmia1.icloud-content.com27
edge-092.usmia1.icloud-content.com27
encrypted-tbn2.gstatic.com27
encrypted-tbn3.gstatic.com27
fonts.gstatic.com27
googlehomefoyer-pa.googleapis.com27
iosantiabuse-pa.googleapis.com27
nexus-websocket-a.intercom.io27
prod-2.us-east-1.mdcs.mshop.amazon.dev27
reach-pa.googleapis.com27
sdk.iad-05.braze.com27
subscriptionsfirstparty-pa.googleapis.com27
*-netseer-ipaddr-assoc.xy.fbcdn.net (hostname family)26
app-measurement.comGoogle LLC26
edge-012.usmia1.icloud-content.com26
edge-041.nlhfd1.icloud-content.com26
edge-054.usmia1.icloud-content.com26
edge-064.usmia1.icloud-content.com26
edge-175.usuyk1.icloud-content.com26
edge-208.usmia1.icloud-content.com26
edge-245.usuyk1.icloud-content.com26
encrypted-tbn0.gstatic.com26
is2-ssl.mzstatic.com26
p175-content.icloud.com26
peoplestack-pa.googleapis.com26
scontent-bos5-1.xx.fbcdn.net26
*-deltacx.siteintercept.qualtrics.com (hostname family)17
ab.chatgpt.com17
ads-resources.waze.com17
adsassets.waze.com17
amd-infra.itunes.apple.com17
amp-api-search-edge.apps.apple.com17
amp-api.apps.apple.com17
amp-api.media.apple.com17
analytics.chase.com17
api.countly.bmwusa.com17
api.delta.com17
apigateway.americanexpress.com17
assets-mercury.mzstatic.com17
attest.api.approov.io17
auth.grammarly.com17
catalog-api-prd.delta.com17
cdn.quantummetric.com17
cocoapi.bmwgroup.us17
com-amazon-amazon.triggers-v1.prod.mobile.weblab.a2z.com17
content.delta.com17
cres.waze.com17
cresg.waze.com17
ctilesgcs-am.waze.com17
customer-api.delta.com17
dlt-beacon.dynatrace-managed.comDynatrace LLC17
edge-055.usmia1.icloud-content.com17
enterprisepayments-api.delta.com17
experiments.apple.com17
f-log-mobile-ios.grammarly.io17
gateway.americas.allianz-assistance.com17
gnar.grammarly.com17
gsp36-ssl.ls.apple.com17
gsp51-ssl.ls.apple.com17
images-mercury.mzstatic.com17
images.openai.com17
inbox-am.ingress.waze.com17
ingestusipv4.quantummetric.com17
ios.chat.openai.com17
iosapps.itunes.apple.com17
iwmapapi.americanexpress.com17
login.bmwusa.com17
loyalty-api.delta.com17
mfasa.chase.com17
mobile-api.delta.com17
mobileone.americanexpress.com17
o33249.ingest.us.sentry.io17
ocsp.r2m01.amazontrust.com17
passbox-pa.googleapis.com17
pd.itunes.apple.com17
pieventscapture.americanexpress.com17
renderer-am.waze.com17
rl.quantummetric.com17
rt-xlb-am.waze.com17
s-gke-usc1-nssi4-18.firebaseio.com17
sdk.waze.com17
securetoken.googleapis.com17
signin.delta.com17
t0.gstatic.com17
t1.gstatic.com17
t2.gstatic.com17
t3.gstatic.com17
testflight.apple.com17
tts-assets.voice.waze.com17
us-std-00001.s3.dualstack.us-east-1.amazonaws.com17
wig-am.waze.com17
ws.chatgpt.com17
www.delta.com17
www.google.co.kr17
www.google.com.hk17
xp.apple.com17
zndhztugwqhlulqht-aexpfeedback.siteintercept.qualtrics.com17
usmia1.icloud-content.com16
s-gke-usc1-nssi4-16.firebaseio.com15
1.datadog.pool.ntp.org14
11-app-mop.meshare.com14
11-mng-mop.meshare.com14
11-upgrade-mop.meshare.com14
11-vdr-mop.meshare.com14
12-alarm-mop.meshare.com14
13-alarm-mop.meshare.com14
14-alarm-mop.meshare.com14
9zswv8.cdn-settings.appsflyersdk.com14
9zswv8.launches.appsflyersdk.com14
a4091a3a2309.cdn4.forter.comForter Inc.14
a5lng2.cdn-settings.appsflyersdk.com14
a5lng2.launches.appsflyersdk.com14
aaaa.oss-accelerate.aliyuncs.com14
ablink.email.rocketmoney.com14
ac.opentable.com14
account.booking.com14
acs-mum-global.alibaba.com14
acs.aliexpress.com14
acs.m.alibaba.com14
adashx.m.taobao.com14
adashx4ae.ut.taobao.com14
adf0901f1861.cdn4.forter.comForter Inc.14
ads.vungle.comVungle Inc14
adsplus-p.oss-accelerate.aliyuncs.com14
adsplus.cn-guangzhou.log.aliyuncs.com14
ae-pic-a1.aliexpress-media.com14
aimg-1.kwcdn.com14
aimg-2.kwcdn.com14
air.alibaba.com14
alivc-aio.cn-hangzhou.log.aliyuncs.com14
am-v1.presage.io14
amdc.alibaba.com14
amdc.aliexpress.com14
amp-api-edge.music.apple.com14
amp-api.music.apple.com14
amp-api.podcasts.apple.com14
analytics.adjust.net.in14
api-adservices.apple.com14
api-meet.ringcentral.com14
api-mucc.ringcentral.com14
api.accuweather.com14
api.alltheapps.org14
api.amplitude.comAmplitude14
api.dropbox.com14
api.events.rocketmoney.com14
api.ipgeolocation.io14
api.iterable.comIterable, Inc.14
api.kickstarter.com14
api.lab.amplitude.com14
api.lyft.bitdrift.io14
api.lyft.com14
api.paypal.com14
api.snapkit.com14
api.swrve.comSwrve Inc.14
api.tripadvisor.com14
api.weather.com14
api.whatsapp.net14
api2.amplitude.comAmplitude14
apis.reolink.com14
apisd.ebay.com14
app-gamma.glip.com14
app-openapi-us-pr.eufy.com14
app-push-us-pr.eufy.com14
app.bestbuy.com14
app.meshare.com14
app.payoneer.com14
app.ringcentral.com14
applecommerce-pa.googleapis.com14
apps.rokt.com14
arup-m.alibaba.com14
arup-m.aliexpress.com14
ashburn.performaized.com14
ashburn.va.speedtest.frontier.com14
assets-jpcust.jwpsrv.com14
assets.alicdn.com14
assets.aliexpress-media.com14
assets.grammarly.com14
attest.approovr.io14
attest.perplexity.ai14
attgaook.speedtest.sbcglobal.net14
audid-api.taobao.comAlibaba Group14
aura.yelp.com14
auth.openai.com14
auth.rocketaccount.com14
auth.svcs.verizon.com14
auth.trivago.com14
auth.uber.com14
authentication-manager.gocurb.com14
auto-api.yelp.com14
autosug.ebay.com14
avatar.us.kwcdn.com14
azure-na-cdn.contentstack.com14
blog.bankofamerica.com14
bookkeeper.itunes.apple.com14
bugly.qq.comTencent Holdings Ltd.14
bunsen.yelp.com14
bup.bankofamerica.com14
bztld4-cdn-settings.appsflyersdk.com14
bztld4-launches.appsflyersdk.com14
c.paypal.com14
c.riskified.comRiskified Ltd.14
c00093-dl.urbanairship.com14
capi.connatix.com14
capi.grammarly.com14
cdl-1.kwcdn.com14
cdl-2.kwcdn.com14
cdl.kwcdn.com14
cdn-hs-graphql-dus.trivago.com14
cdn-hs-graphql-sfo.trivago.com14
cdn-settings.segment.com14
cdn.apple-mapkit.com14
cdn.jwplayer.com14
cdn.lyft.com14
cdn.taboola.com14
cdn1.bettersleep.com14
cdn1.ipnoscloud.com14
cdn2.ookla.com14
certificates.godaddy.com14
cf.bstatic.com14
cfg.kwcdn.com14
client-api.itunes.apple.com14
client-api.rocketmoney.com14
client.cardinaltrusted.com14
cloud-config-service.rtc.aliyuncs.com14
cloudflare-dns.com14
cmsdk.cardinalcommerce.com14
cn-cloudflare.pidetupop.com14
cn-dc1.uber.com14
cn-dca1.cfe.uber.com14
cn-dca1.uber.com14
cn-geo1.uber.com14
collect.riskid.security14
collector-pxhyx10rg3.perimeterx.net14
com-amazon-amazonbusiness.triggers-v1.prod.mobile.weblab.a2z.com14
commimg-1.kwcdn.com14
config.emb-api.comEmbrace Mobile, Inc.14
consumer-downdetector-api.speedtest.net14
counter.pushauction.com14
crosell.datacaciques.com14
curb-mobile-assets.s3.amazonaws.com14
cwf-speedtest-se.clearwave.com14
d.applovin.com14
d15e55tqlrbrds.cloudfront.net14
d1a3f4spazzrp4.cloudfront.net14
d1ghe043m1zc2y.cloudfront.net14
d1vi3mu7ljhkg.cloudfront.net14
d4p17acsd5wyj.cloudfront.net14
d8c14d4960ca.edge.sdk.awswaf.com14
data.emb-api.comEmbrace Mobile, Inc.14
deals.allegiantair.com14
dha4fs.payoneer.com14
dl.kwcdn.com14
drive.google.com14
dynamic-media-cdn.tripadvisor.com14
ecom-api.costco.com14
edcs.ringcentral.com14
edge-024.usbos2.icloud-content.com14
edge-033.usuyk1.icloud-content.com14
edge-217.usuyk1.icloud-content.com14
edge-230.usmia1.icloud-content.com14
edge-237.usuyk1.icloud-content.com14
edge-249.usuyk1.icloud-content.com14
edge-256.usmia1.icloud-content.com14
edge-271.usuyk1.icloud-content.com14
edr.ringcentral.com14
efleet.gocurb.com14
ellsworth.from-ks.com14
entitlements-edge.itunes.apple.com14
eos-webview.uber.com14
eu-aa.online-metrix.net14
evs.events.rocketmoney.com14
experiment-allocation.yelp.com14
fds.apple.com14
fel-api.prod.browse.bestbuy.com14
firebaseinappmessaging.googleapis.com14
fiverr-res.cloudinary.com14
fl.speedtest.openinfra.com14
flag.lab.amplitude.com14
fn7uqp.cdn-settings.appsflyersdk.com14
fn7uqp.inapps.appsflyersdk.com14
fn7uqp.launches.appsflyersdk.com14
fraud-api.dyneti.com14
frontend-cdn.perplexity.ai14
fscdn.eppo.cloud14
fundingchoicesmessages.google.com14
g.whatsapp.net14
gapi.waze.com14
gate.datacaciques.com14
gateway.facebook.com14
gateway.grammarly.com14
gcp-img.slatic.net14
gdx-api-mobileapps.costco.com14
gdx-api.costco.com14
gdx-assets.costco.com14
global-orange-dc.alibaba.com14
global-orange-dc.aliexpress.com14
goods-vod.kwcdn.com14
graph.instagram.com14
graphql-mobile-api.yelp.com14
gspe76-ssl.ls.apple.com14
gtm.trivago.com14
gtp-app-dot-b-ppc-app-prod-u2xv6z.ew.r.appspot.com14
guce.oath.com14
gv-vod-cdn.aliexpress-media.com14
h-adashx.ut.alibaba.com14
h-adashx4ae.ut.taobao.com14
h.costco.com14
home-cdn.reolink.us14
hvixb1-cdn-settings.appsflyersdk.com14
hvixb1-launches.appsflyersdk.com14
i.ebayimg.cn14
i.ebayimg.com14
i.instagram.com14
i.kickstarter.com14
i.travelapi.com14
i.ytimg.com14
i9wkmk-cdn-settings.appsflyersdk.com14
i9wkmk-launches.appsflyersdk.com14
iad-03.braze.comBraze, Inc.14
iadcontent.apple.com14
iadctest.qwapi.com14
iadctestus.qwapi.com14
iclientgw.alipay.com14
iid.googleapis.com14
image.pushauction.com14
imap.gmail.com14
imc2.csid.us14
img-1.kwcdn.com14
img-2.kwcdn.com14
img.alicdn.com14
img.riskified.com14
imgcy.trivago.com14
in.grammarly.com14
init.itunes.apple.com14
ios.femetrics.grammarly.io14
ita.emr.entersekt.com14
journey.gocurb.com14
known-issues.apple.com14
l.contentsquare.net14
ld-events.payoneer.com14
ld-polling.payoneer.com14
live.us.shoplive.cloud14
locale.temu.com14
login.live.com14
login.microsoftonline.com14
login.payoneer.com14
lws-icbu.dingtalk.com14
m.csqtrk.net14
m.trip.com14
m1-us.iotbing.com14
mapi.speedtest.net14
mapping.lyft.com14
mdtb-cf-2.ads.aps.amazon-adsystem.com14
media-cdn.costco.com14
metricreceiver.cellrebel.com14
miami.fl.speedtest.frontier.com14
mobifts.ebay.com14
mobile-api.fiverr.com14
mobile-api.opentable.com14
mobile-api.yelp.com14
mobile-apps.booking.com14
mobile-collector.newrelic.comNew Relic14
mobile-config.ring.com14
mobile-content.uber.com14
mobile-gw.spot.im14
mobile-production.content-square.net14
mobile.events.data.microsoft.com14
mobile.fiverr.com14
mobileapi.gocurb.com14
mobileapi.speedtest.net14
mobileappcommunicator.auth.microsoft.com14
mobilecontent.costco.com14
mobilecontentdev.costco.com14
mobileonenexus.americanexpress.com14
mobiletelemetry.ebay.com14
moxie.foxnews.com14
mparticle.weather.com14
ms.applovin.com14
mservice.bankofamerica.com14
msg-global.m.taobao.com14
msgacs.m.alibaba.com14
mum-global.alibaba.com14
myaccount.payoneer.com14
myspeed.giantcomm.net14
mzstorekit-sb.itunes.apple.com14
news-app-events.apple.com14
news-client.apple.com14
news-edge.apple.com14
news-events.apple.com14
news-sports-events.apple.com14
news-todayconfig-edge.apple.com14
newsletter-edge.apple.com14
npm-assets.fiverrcdn.com14
ntfy.gdfsecurity.com14
ntp.aliyun.com14
nypost.com14
nypost.nypost.djservices.io14
o565714.ingest.sentry.ioFunctional Software, Inc.14
obapi-api.optum.com14
ocsp.rootca1.amazontrust.com14
ocsp2.globalsign.com14
odm.app-ads-services.com14
ona83f.cdn-settings.appsflyersdk.com14
ona83f.launches.appsflyersdk.com14
online.americanexpress.com14
ontology.health.apple.com14
ookla.a56.as6453.net14
ookla2.eaglecable.net14
otel-gw.booking.com14
outlook.office365.com14
p1.parsely.com14
p167-content.icloud.com14
p167-mcc.icloud.com14
p167-mccgateway.icloud.com14
p168-content.icloud.com14
p30-mcc.icloud.com14
p51efdfh-ios.mobile-messenger.intercom.com14
pcpassets.payoneer.com14
pdp.aliexpress-media.com14
pfse-u.file.temu.com14
pftka-us.temu.com14
phoots.strava.com14
pisces.bbystatic.com14
platform-lookaside.fbsbx.com14
prebid-server.rubiconproject.com14
prod-1.us-east-1.mdcs.mshop.amazon.dev14
provider-api.health.apple.com14
pushx.reolink.com14
px-intl.ucweb.com14
q-xx.bstatic.com14
r-xx.bstatic.com14
redirector.googlevideo.com14
relax-melodies-android.firebaseio.com14
research.apple.com14
resizer.otstatic.com14
resolver-icbu.dingtalk.com14
robinfrontend-pa.googleapis.com14
rr1---sn-vgqsknzd.googlevideo.com14
rr1---sn-vgqsrnzy.googlevideo.com14
rr2---sn-uhvcpax0n5-4gbd.googlevideo.com14
rr3---sn-vgqsknzs.googlevideo.com14
rr3---sn-vgqsrn67.googlevideo.com14
rr5---sn-vgqsrnzz.googlevideo.com14
rr7---sn-uhvcpax0n5-4gb6.googlevideo.com14
rr8---sn-uhvcpax0n5-4gb6.googlevideo.com14
rt.applovin.com14
rt2.fiverr.com14
s-gke-usc1-nssi2-52.firebaseio.com14
s-gke-usc1-nssi2-53.firebaseio.com14
s.alicdn.com14
s.w-x.co14
s.wayfair.com14
s.youtube.com14
s3-media0.fl.yelpcdn.com14
sac.nypost.com14
sale.alibaba.com14
samizdat-graphql.nytimes.com14
sas.pcms.apple.com14
sb.music.apple.com14
sc04.alicdn.com14
scontent-cgk1-1.xx.fbcdn.net14
scontent-lga3-2.xx.fbcdn.net14
scontent-mia3-3.xx.fbcdn.net14
scontent-mia5-1.xx.fbcdn.net14
scontent-mia5-2.xx.fbcdn.net14
scontent-msp1-1.xx.fbcdn.net14
sdk-04.moengage.com14
sdk-api-v1.singular.netSingular Labs, Inc.14
sdk-assets.teads.tv14
sdk.iad-07.braze.com14
sdk.mb1.mycardplace.com14
se-edge.itunes.apple.com14
secure-mobile-apps.booking.com14
secure.globalsign.com14
secure.img1-fg.wfcdn.com14
seller-acs.aliexpress.com14
sentry.io14
sequoia.cdn-apple.com14
sessions.bugsnag.comBugsnag Inc.14
sf16-sg.tiktokcdn.com14
signaler-pa.googleapis.com14
signin.costco.com14
sip121-1121.ringcentral.com14
sip131-1111.ringcentral.com14
skan-s2s.singular.net14
slsrole.alicdn.com14
smp-device-content.apple.com14
sp.yelp.com14
speedtest-atl.conexonconnect.com14
speedtest-coda.noc.gatech.edu14
speedtest-ict.ideatek.com14
speedtest.chisholmbb.com14
speedtest.gsu.edu14
speedtest.homecomminc.com14
speedtest.kuducom.com14
speedtest.mtc4me.com14
speedtest.net.usf.edu14
speedtest.optyxbroadband.com14
speedtest.tctelco.net14
speedtest.tpa1.hivelocity.net14
speedtest.us-at.kamatera.com14
speedtest03.bluestreamfiber.net14
speedtest1.atl1-us.gozfly.net14
speedtest10g.tpa.as13760.net14
speedtest14.point-broadband.com14
speedtest2-wichita.kanren.net14
speedtestatl.gethotwired.com14
speedtestnet.rapidsys.com14
sr-client-cfg.amplitude.com14
src.ebay-us.com14
ssgtm-sbyzlt5hyq-ey.a.run.app14
st.downdetectorapi.com14
static-1.kwcdn.com14
static-2.kwcdn.com14
static.criteo.net14
static.tacdn.com14
staticassets-creator-design.criteo.net14
stcblink.nypost.com14
stocks-analytics-events.apple.com14
stocks-data-service.apple.com14
stocks-edge.apple.com14
storage.live.com14
streams.bestbuy.com14
suggestqueries.google.com14
survey.qualtrics.com14
sy.presage.io14
t-cf.bstatic.com14
t.nypost.com14
t.pushauction.com14
t.seenthis.se14
tampfl-speedtest-ookla-01.st.charter.com14
tb-static.uber.com14
tc2.uber.com14
thtka-us.temu.com14
tiles.zoom.earth14
tilt-ws.bankofamerica.com14
tpataspeedtest.wiline.com14
trk.mgs.opentable.com14
u.expo.dev14
umlazada.alibaba.com14
upsx.weather.com14
us-ds.temu.com14
us-ummt.alibaba.com14
us.temu.com14
us.ynuf.aliapp.org14
us1-spiky.clevertap-prod.com14
us1.clevertap-prod.com14
usbos2.icloud-content.com14
user-api.speedtest.net14
user.zmodo.com14
v.w-x.co14
venue-image.waze.com14
video.aliexpress-media.com14
video.seenthis.se14
videocloud.cn-hangzhou.log.aliyuncs.com14
vntsnotificationservice.visa.com14
vodexp.ebay.com14
vovud4.cdn-settings.appsflyersdk.com14
vovud4.launches.appsflyersdk.com14
vpn-api.proton.me14
vpp-license-proxy.aliyuncs.com14
way2i.gocurb.com14
weather-analytics-events.apple.com14
weather-edge.apple.com14
weather.com14
webproxy.advp.apple.com14
wellington-speedtest.connectwithusa.com14
whatismyip.proveapis.com14
www.aliexpress.com14
www.allegiantair.com14
www.awxcdn.com14
www.bac-assets.com14
www.bestbuy.com14
www.booking.com14
www.expedia.com14
www.hotels.com14
www.instagram.com14
www.kayak.com14
www.kickstarter.com14
www.linkedin.com14
www.payoneer.com14
www.paypal.com14
www.perplexity.ai14
www.speedtest.net14
www.youtube.com14
x.ss2.us14
xx.bstatic.com14
yclqkn.cdn-settings.appsflyersdk.com14
yclqkn.launches.appsflyersdk.com14
youtube.com14
youtubei.googleapis.com14
yrl7yj.cdn-settings.appsflyersdk.com14
yrl7yj.launches.appsflyersdk.com14
yt3.ggpht.com14
zconfig.alibabausercontent.com14
zncviucggbawcrwdo-payoneer.siteintercept.qualtrics.com14
*.appsync-realtime-api.us-east-1.amazonaws.com (hostname family)13
*.oaiusercontent.com (hostname family)13
5infdg.inapps.appsflyersdk.com13
a-api.anthropic.com13
a-cdn.anthropic.com13
a.co13
a0.muscache.com13
addons-pa.googleapis.com13
advertising.walmart.com13
analytics.mobile.walmart.com13
api.github.com13
api.protonmail.ch13
api.theepochtimes.com13
app-media.x.ai13
apps.pingone.com13
appsgenaiserver-pa.googleapis.com13
appsgrowthpromo-pa.googleapis.com13
arcore.googleapis.com13
asset.chase.com13
assets.claude.ai13
assets.grok.com13
avatars.githubusercontent.com13
bf65110taw.bf.dynatrace.com13
bf84553kkn.bf.dynatrace.com13
buy.itunes.apple.com13
cafe.github.com13
captive.apple.com13
cdn-f.adsmoloco.comMoloco Inc.13
cdn.ampproject.org13
cdn.auth0.com13
cdn.fbsbx.com13
cdn.teads.tv13
cdn.zimperium.com13
cell8003.iad.mobile.bid-na.ads.aps.amazon-adsystem.com13
chatgpt.com13
ci3.googleusercontent.com13
claude.ai13
clients4.google.com13
clienttracing-pa.googleapis.com13
cloudidentity.googleapis.com13
cloudsearch.googleapis.com13
collection.decibelinsight.net13
collector-pxuarm9b04.perimeterx.net13
commerce16-normal-us-ttp.capcutapi.us13
config.mtp.sag.us-ashburn-1.oci.oraclecloud.com13
connect.facebook.net13
connectivitycheck.gstatic.com13
delta.data.adobedc.net13
device.payfone.com13
digital-cloud-prem.apis.medallia.com13
discover-pa.googleapis.com13
drfdisvc.walmart.com13
drivefrontend-pa.googleapis.com13
drivelabels.googleapis.com13
edge-003.usuyk1.icloud-content.com13
edge-011.usmes1.icloud-content.com13
edge-031.usbos2.icloud-content.com13
edge-034.usuyk1.icloud-content.com13
edge-046.usmia1.icloud-content.com13
edge-080.usbos2.icloud-content.com13
edge-082.usuyk1.icloud-content.com13
edge-090.ussea3.icloud-content.com13
edge-116.usmia1.icloud-content.com13
edge-148.usmia1.icloud-content.com13
edge-176.usuyk1.icloud-content.com13
edge-227.usuyk1.icloud-content.com13
edge-235.usuyk1.icloud-content.com13
edge-249.usmia1.icloud-content.com13
edge-255.usuyk1.icloud-content.com13
edge-270.usmia1.icloud-content.com13
edge-283.usmia1.icloud-content.com13
editor16-normal-us-ttp2.capcutapi.us13
egv4py1c-ios.mobile-messenger.intercom.com13
encrypted-tbn1.gstatic.com13
epochtimeshzek.dataplane.rudderstack.com13
evercloud16-normal-us-ttp.capcutapi.us13
evercloud16-normal-us-ttp2.capcutapi.us13
external-bos5-1.xx.fbcdn.net13
external-ord5-3.xx.fbcdn.net13
fcmtoken.googleapis.com13
feed16-normal-us-ttp.capcutapi.us13
feed16-normal-us-ttp2.capcutapi.us13
feedback-pa.googleapis.com13
fp.pipopayment.us13
frontier-us-ttp2.capcutw.us13
gcs-eu-00002.content-storage-upload.googleapis.com13
gecko16-normal-us-ttp2.capcutapi.us13
geller-pa.googleapis.com13
genai-graph.facebook.com13
gql.music.amazon.dev13
graph-fallback.facebook.com13
grok.com13
gspe11-ssl.ls.apple.com13
gto-ocp.icproxy.secp.c1.vanguard.com13
gw.geoedge.be13
gz.gstatic.com13
gz0.googleusercontent.com13
i.l-dsp.inmobicdn.net13
i16-normal-us-ttp2.capcutapi.us13
i5.walmartimages.com13
images.salsify.com13
imagine-public.x.ai13
img.theepochtimes.com13
inbox.google.com13
ios-mdm.googleusercontent.com13
is3-ssl.mzstatic.com13
is4-ssl.mzstatic.com13
is5-ssl.mzstatic.com13
ismmyx.cdn-settings.appsflyersdk.com13
ismmyx.launches.appsflyersdk.com13
lf16-beecdn-row.capcutcdn-us.com13
lf16-beecdn.ibytedtos.com13
lf16-effectcdn-row.capcutcdn-us.com13
lf16-effectcdn-us.tiktokcdn-us.com13
lf16-faceu-file-sign.capcutcdn-us.com13
lf16-geckocdn.tiktokcdn-us.com13
lf19-geckocdn.tiktokcdn-us.com13
lh5.googleusercontent.com13
lh6.googleusercontent.com13
lh7-rt.googleusercontent.com13
locationhistory-pa.googleapis.com13
locationhistoryplacedetails-pa.googleapis.com13
log16-normal-us-ttp2.capcutapi.us13
m.clientaccessapi.rjf.com13
mail-api.proton.me13
mail-attachment.googleusercontent.com13
mail.google.com13
maps.gstatic.com13
mcl4db470h-*.device.marketingcloudapis.com (hostname family)13
mds.prod.walmartimages.com13
meetings.googleapis.com13
mobile.eum-appdynamics.com13
mobile.facebook.com13
mobile.vanguard.com13
mobilemaps-pa-gz.googleapis.com13
mobilemaps.googleapis.com13
mon16-normal-us-ttp2.capcutapi.us13
mpi-prod.zimperium.com13
mpiprod-cdn.zimperium.com13
mssdk16-normal-us-ttp2.capcutapi.us13
music.amazon.com13
mybmwapp.caas.bmw13
notes-analytics-events.apple.com13
o1158394.ingest.us.sentry.io13
ocsp.r2m04.amazontrust.com13
odc.officeapps.live.com13
odr.itunes.apple.com13
ogads-pa.googleapis.com13
ort.wellsfargo.com13
p16-capcut-sign-useast5.capcutcdn-us.com13
p16-capcut-sign-useast8.capcutcdn-us.com13
p16-common.tiktokcdn-us.com13
p16-heycan-file-sign.capcutcdn-us.com13
p16-heycan-image-sign.capcutcdn-us.com13
p16-ulike.capcutcdn-us.com13
p176-content.icloud.com13
p176-quota.icloud.com13
p19-capcut-sign-useast8.capcutcdn-us.com13
p19-common.tiktokcdn-us.com13
passport16-normal-us-ttp2.capcutapi.us13
pixel.adsafeprotected.com13
powerslave.com13
prod.us.ecp.bmw.cloud13
proxy.telemetry.us-ashburn-1.oci.oraclecloud.com13
pwe.epochbase.com13
reco.chase.com13
resources.digital-cloud-prem.medallia.com13
restrictedapps-pa.googleapis.com13
rr1---sn-hp57ynlr.googlevideo.com13
rr3---sn-hp57yns6.googlevideo.com13
rr4---sn-hp57kndk.googlevideo.com13
rumcdn.geoedge.be13
rupload.facebook.com13
s.xlgmedia.com13
sac.presage.io13
scontent-atl3-2.xx.fbcdn.net13
scontent-dfw5-1.xx.fbcdn.net13
scontent-dfw5-2.xx.fbcdn.net13
scontent-dfw6-1.xx.fbcdn.net13
scontent-dfw6-2.xx.fbcdn.net13
scontent-hou1-1.xx.fbcdn.net13
scontent-iad3-1.xx.fbcdn.net13
scontent-iad6-1.xx.fbcdn.net13
scontent-mia3-1.cdninstagram.com13
scontent-mia3-1.xx.fbcdn.net13
scontent-mia3-2.cdninstagram.com13
scontent-mia5-1.cdninstagram.com13
scontent-ord5-1.xx.fbcdn.net13
scontent-ord5-2.xx.fbcdn.net13
scontent-ord5-3.xx.fbcdn.net13
sdk.iad-04.braze.com13
sdk.iad-08.braze.com13
sdmntprcentralus.oaiusercontent.com13
sdmntpreastus2.oaiusercontent.com13
sdmntprnorthcentralus.oaiusercontent.com13
sdmntprsouthcentralus.oaiusercontent.com13
sdmntprwestcentralus.oaiusercontent.com13
sdmntprwestus.oaiusercontent.com13
sdmntprwestus2.oaiusercontent.com13
sdmntprwestus3.oaiusercontent.com13
searchlabspartnerservice-pa.googleapis.com13
secure.chase.com13
securitydomain-pa.googleapis.com13
sf-i18n-resources.tiktokcdn-us.com13
sf16-ttcdn-row.capcutcdn-us.com13
sf16-web-tos-buz.capcutcdn-us.com13
sites.chase.com13
smetrics.delta.com13
static-assets-1.truthsocial.com13
static-bos5-1.xx.fbcdn.net13
static-ord5-3.xx.fbcdn.net13
static.adsafeprotected.com13
static.chase.com13
static2.chasecdn.com13
streetviewpixels-pa.googleapis.com13
subscriptionsmobile-pa.googleapis.com13
taskassist-pa.googleapis.com13
tasks-pa.googleapis.com13
tnc16-normal-us-ttp2.capcutapi.us13
trace.app-performance.music.amazon.dev13
traffic.outbrain.com13
truthsocial.com13
us-ore-00001.s3.dualstack.us-west-2.amazonaws.com13
uslax2.icloud-content.com13
v16-capcut.capcutcdn-us.com13
v19-capcut.capcutcdn-us.com13
vanguard.data.adobedc.net13
video-dfw5-1.xx.fbcdn.net13
video-dfw5-2.xx.fbcdn.net13

Sensor & data access

What iOS itself records apps touching. Each resource links to a page explaining what that access means and which apps were measured doing it.

ResourceAppsWhat it means
Contacts9The app read your address book — names, numbers and emails of people who never agreed to anything. Contact lists are the classic seed for social-graph building.
Photos9The app reached into your photo library. Photos carry faces, documents, and often GPS coordinates in their metadata.
Camera5The app activated the camera. iOS logs the access, not the footage — a count says how often, not what was seen.
Microphone4The app activated the microphone. Frequent access by an app with no voice feature is worth a hard look.
Location4The app asked where you are. Repeated over time, location becomes a movement history: home, work, clinic, place of worship.
Media libraryThe app read your Apple Media library — what music and media you own, a durable taste profile.
Screen recordingThe app captured screen contents. Anything visible was capturable, including other apps' text.
CalendarsThe app read your calendar — who you meet, when, and often where and why.
RemindersThe app read your reminders, which are frequently to-do lists of private business.
Motion & fitnessThe app read motion and fitness data — step counts and movement patterns, which can imply health status.

Donate your own App Privacy Report — it's anonymous →