Donate your App Privacy Report

Your iPhone already measures which apps talk to which tracking domains — Apple just keeps that evidence on your device. Donate it, and it becomes public proof in the App Privacy Database: what apps actually do, next to what they claim. No other privacy catalog has this.

The promise: your export file is parsed in your browser and never uploaded. Web-browsing records — Safari and in-app browsers — are discarded on your device before anything is prepared, and the server rejects them too. You see every app and every domain row that would be sent, and can untick any app. Sensor-access counts (contacts, camera, microphone…) are shared only if you opt in — and as counts only, never with times. We store no account, no email, no IP address, and no timestamps finer than the day. This page sets no cookies and runs no analytics.

1 · Export the report on your iPhone

Settings → Privacy & Security → App Privacy Report (turn it on if it isn't — then live with it for a few days).
Scroll to the bottom → Save App Privacy Report.
AirDrop / send the App_Privacy_Report_….ndjson file to this computer.

2 · Review what would be shared

Choose the exported .ndjson file — it stays in your browser:

Also share sensor-access counts — how many times each checked app touched your contacts, camera, microphone, photos or location. Counts only, never when: the report's timestamps stay in your browser. Off by default; your per-app unticks apply to this too.

3 · Donate

Untick any app you'd rather keep private (dating, health, faith — your call), then:

What happens to it

Every donation is reviewed by a person before any of it counts — we accept or reject the upload itself, so nothing you send enters the corpus unseen. The App Privacy Database then shows only aggregates, and a finding becomes publicly visible only once at least three separate accepted donations corroborate it. A reviewer decides whether an app belongs in the database; once that decision is made, further domains observed for that same app inherit it rather than waiting in a queue — the three-donation bar still has to be cleared before anything is shown, and those entries are marked in our records so we can always tell which claims a reviewer read line by line. Contacted domains are attributed to tracker companies via the AdGuard companiesdb (CC BY-SA 4.0). Design details: ADR 0016 in the site repo.