Read beyond this project

Different sources answer different questions. Use an independent profile to understand a service's role, technical documentation for its fields and switches, and our app audit for the integration we actually inspected.

Source	Useful for	Keep in mind
Exodus Privacy	Android SDK profiles, categories, signatures and app reports.	Static presence does not prove activity; coverage is incomplete.
Ghostery WhoTracks.Me	Web services, company relationships, categories and prevalence.	Web observations do not establish a particular Android app's payload.
DuckDuckGo Tracker Radar	Domain ownership, classification and cookie/fingerprinting metadata.	A technical dataset, not a complete narrative account of a company's practices.
Privacy International's app investigation	How investigators inspect actual transmissions and explain their implications.	This investigation dates to 2018; its findings concern its tested sample.
Cracked Labs: Corporate Surveillance in Everyday Life	How data collection, identifier matching, profiling and brokerage connect.	Published in 2017; check newer sources for current ownership and products.
TrackerControl	Exploring app connections and recognised tracking companies on Android.	It does not decrypt TLS payloads; a destination observation is not a complete field inventory.

How to read vendor documentation

An API field list can reveal far more than marketing copy. Look for automatically collected fields, persistent identifiers, optional user attributes, upload queues, opt-outs and links to other systems. A feature being available does not establish that an app enabled it. Read our evidence labels.

Profiles link the relevant technical pages directly. Sources were reviewed for this content pass on 28 October 2026. English-language source material is described in both language versions; a translated explanation does not imply that the external source itself is Dutch.