They said your data was safe.

Your baby monitor sent footage to a server you've never heard of. Your TV watches what you watch. Your antivirus sold your browsing history. We checked 684 products against what their manufacturers actually do — not what they claim.

or
Even the responsible AI company cuts corners.ClaudeA Chinese AI stored your conversations in a database anyone could read.DeepSeekThree seconds of audio. That's all it takes to clone your voice.ElevenLabsYour old "yes" to autocomplete became a "yes" to AI reading every email.Google GeminiNow he cannot say anything.ChatGPTThe uncensored AI generated child sexual abuse material at industrial scale.GrokA child fell in love with software, and nobody was watching.Character.AIAn AI company let people fall in love, then lobotomised the product overnight.ReplikaThe company that makes your browser was running a loan shark operation.Opera BrowserEvery Tapo camera in the world shared the same key. The researcher called it TAPOcalypse.Tapo C520WSThe FTC's first IoT action was against a camera with "Secure" literally in its name.TRENDnet SecurView IP Cameras150,000 security cameras hacked. Tesla factories. Psychiatric patients. Prison cells.Verkada Security CamerasIt wasn't designed for the people it was pointed at.Verkada Security CamerasYou gave your ID to TikTok. A company you never heard of left it on the internet.Au10tix Identity VerificationExperian sells identity theft protection. Experian is the identity theft vulnerability.Experian Credit Report1.6 billion people's location histories. Who bought them? Nobody is sure.Near Location Data PlatformThe data broker equivalent of a fake moustache.X-Mode Location DataThe app said "prayer times." The data said "surveillance target."SafeGraph Location DataPlanned Parenthood visitor data, sold to anyone willing to pay.SafeGraph Location DataThe tool marketed as saving lives is outing children to hostile families.Gaggle Safety ManagementThe classroom became a data collection pipeline.Google ClassroomAn algorithm enforces exam integrity by punishing disability, poverty, and skin colour.Proctorio Exam SurveillanceAn algorithm that can't tell a second language from a chatbot is deciding who graduates.Turnitin$85 million in deposits vanished. The middleman who kept the records no longer exists.Synapse Banking-as-a-ServiceBiometric colonialism with a cryptocurrency wrapper.Worldcoin / World IDHe created the disease and sells the cure.Worldcoin / World IDWhen every regulator reaches the same conclusion, the product is the problem.Worldcoin / World ID146 child exploitation lawsuits. Two countries banned it.Roblox"You're in control" meant "you had three months to notice."My Health RecordTwo billion dollars for a system the doctors say doesn't work.My Health Record$9.1 million for an app that found 2 contacts.COVIDSafe App"Trust us, we deleted it" is not deletion.COVIDSafe AppMillions of iPhone users walked around thinking they were protected. They were carrying a placebo.COVIDSafe AppThe biometric step confirms you're holding a phone. Not that you're the person on the document.myID / Digital IdentityUnlike a password, you cannot change your face. The government proceeded anyway.myID / Digital IdentityThe ATO made it easier for fraudsters to get in than for real taxpayers to get paid.ATO App / myTaxThe people who served their country cannot get their country to secure their data.VA Health / My HealtheVetPeople fleeing floods had to choose between asking for help and being deported.FEMA AppThe federal government defrauded itself.Login.govHMRC built one of the largest biometric databases in the UK and called it customer service.HMRC App100 million faces in a searchable database. The man running it lied to Congress.ID.me Identity VerificationAn algorithm decided who eats and who doesn't. It had a racial bias baked in.ID.me Identity VerificationYour GP notes, in the hands of a US intelligence contractor.NHS AppEvery promise on that QR code screen was a lie.Service NSW App$557 million stolen through fake myGov accounts in a single year.myGov AppThe government repaid $1.76 billion. The dead did not come back.myGov AppYour Medicare number — for $30 on the dark web.Express Plus Medicare443,000 people got debts they never owed. At least three killed themselves.Express Plus CentrelinkWelfare recipients live under more financial surveillance than money launderers.Express Plus CentrelinkThe Ombudsman called it failing the most vulnerable Australians.Express Plus CentrelinkYour face, sold on the dark web. That is the trusted traveler program.TSA PreCheck & Global EntryThe world's largest biometric database, protected by denial.Aadhaar / mAadhaarDigital inclusion, with a body count.Aadhaar / mAadhaarDigital inclusion means nothing when the government makes exclusion the default.Service Victoria AppYour DNA is for sale in a bankruptcy auction.23andMe DNA KitYour trainer's app won't even promise to keep your data private.Trainerize PlatformA private equity firm bought your hiking routes for $150 million.AllTrails11,000 crimes traced to one breach. Health secrets became criminal tools.MedibankThe app women downloaded to protect themselves was doing exactly what they feared.Stardust Period TrackerThe data you are trying to protect is betrayed by the pattern of protecting it.Stardust Period TrackerA sportswear company couldn't protect 150 million accounts.MapMyRun / MapMyFitnessExecutives sold stock before telling 150 million users their data was stolen.MapMyRun / MapMyFitnessA diet company collected body image data from 8-year-olds. The government made them burn it.WeightWatchers / SequenceThe algorithm converts poverty into higher premiums.Root Insurance AppLinkedIn trained AI on your posts. They turned it on by default. They didn't tell you.LinkedIn JobsThe apology app has the same disease as the original.YouTube KidsA child watched Peppa Pig drink bleach. The algorithm recommended it.YouTube KidsThe FTC fined them $650,000 — about ten cents per child.VTech KidiConnect / Learning LodgeThe encryption was opt-in. The Chinese access was not.LINE MessengerViber uploaded your friends' phone numbers without their knowledge.ViberA cloud chat app with a privacy reputation it hasn't earned.Telegram (Privacy Claims)The encrypted mode doesn't work in groups, doesn't sync, and requires manual activation. Almost nobody uses it.Telegram (Privacy Claims)A keylogger built into Windows. Microsoft delayed it. They didn't cancel it.Windows 11A quarter of a billion dollars drained from a password manager.LastPass Password ManagerYour family album is Google's AI training data.Google PhotosYour printer worked yesterday. Today it refuses because the ink isn't branded.Epson EcoTank ET-2850Passwords, API keys, database credentials — one Google search away on public Trello boards.TrelloOne admin click. Every document in the company fed to third-party AI.Notion AI4 billion phone numbers harvested. Your privacy, decided by someone else's download.TruecallerYour vacuum cleaner, weaponised.Ecovacs Deebot X2Two aisles apart. Two different privacy regimes.Costco AppYour face, in a database, for twelve-dollar towels.Kmart AustraliaYou downloaded a bargain store. Arkansas says you downloaded spyware.TemuHackers came in through the air conditioning.Target App / CircleThe largest private surveillance network in America, on your front porch.Ring Floodlight Cam Wired ProRing employees used the camera to watch you undress.Ring Floodlight Cam Wired ProYour smart plug is now an unpatched entry point to your home network. Permanently.Wemo Smart HomeThe fish tank of 2025 is a grow light.Mars Hydro IoT Grow LightsThe company that sold it has gone silent.Nexx Smart Garage ControllerThis is not a vulnerability. This is an absence of security.Nexx Smart Garage ControllerYou bought a pet. It reports to Beijing.Unitree Go2 Robot DogYour hotel room lock has been bypassable for 36 years.Saflok Hotel LocksLess secure than a $5 combination padlock from 1970.Master Lock Smart PadlockYour family movie night, screenshotted 120 times per minute, by a Chinese company.Hisense Smart TVInstagram had encrypted DMs. Meta removed them 11 days before a new law.InstagramYour cancer diagnosis, sent to an advertising company via a tracking pixel.Facebook SDK / Meta PixelThe data that destroyed his career started as "anonymous app analytics."Facebook SDK / Meta PixelThe privacy settings were a placebo. The SDK ignored them.Facebook SDK / Meta PixelThe only social network that requires your actual home address.NextdoorTubi's Super Bowl ad was designed to make you think someone hijacked your TV.TubiYou can buy a pre-infected streaming box with same-day delivery.Cheap Android TV Boxes (BadBox 2.0)The company the IRS chose to provide free tax filing spent years hiding it.IRS Free File / Direct FileGM sold your driving data to insurance companies. Behind your back.GM OnStar / Chevrolet Connected ServicesThe company building luxury cars couldn't secure its own source code.Mercedes-Benz MB.OS / MBUXThe connected car was connected to anyone who found the door.Subaru Starlink Connected ServicesVW stored it all in the cloud and forgot to lock the door.VW ID.4 / Cariad PlatformThe privacy-first wearable became a Meta product. Everything it recorded now belongs to an ad company.Limitless PendantYour glasses recorded your most private moments and sent them to Kenya.Meta Ray-Ban Smart GlassesKajabi tells you they don't sell your data. Their own CCPA disclosure says they do.KajabiThe BBB gave Kajabi an F. They ignored 15 out of 18 complaints.KajabiYou pay $199/month for "your own app." Kajabi built it, hosts it, and keeps the data.KajabiEight scraping tools harvest Skool member data. Some don't even need a login.SkoolSkool's privacy policy doesn't apply to paid communities. That's their entire business.SkoolMighty Networks says it only collects your IP address. It processes 9 billion data points per month.Mighty NetworksYour yoga community data goes to Palo Alto. Adriene's face is on the app. Mighty Networks has the database.KULA by Yoga With AdrieneTeachable looks like a New York company. Since 2020, it's owned by a Brazilian company you've never heard of.TeachableYour course progress vanishes 30 days after the creator leaves Teachable. Your certificate goes with it.TeachablePatreon left a debugging tool on its production server. 2.3 million users' private messages were published online.PatreonStop using Patreon and your data sits there for a decade. Ten years of private messages and home addresses.PatreonStan Store's privacy policy is a PDF nobody will ever find. The buyer has no idea who really has their data.Stan StoreStart typing your card into a Stan Store checkout and change your mind? Stripe already captured what you typed.Stan StoreTony Robbins Arena. 30,000 members. Developer: Mighty Software, Inc. Support email: help@mightynetworks.com.Tony Robbins ArenaJim Kwik teaches you to optimise your brain. His app hasn't been updated since 2023. It's not his app.Kwik Brain UniverseMatthew Hussey's members share heartbreak and dating struggles. Mighty Networks stores it all.Matthew Hussey LoveLifeMarie Forleo invested in Mighty Networks. Then she sent her students' data to it.Marie ForleoOne creator. Two apps. Three companies with your data. That's how the influencer economy works.Find What Feels GoodEven the responsible AI company cuts corners.ClaudeA Chinese AI stored your conversations in a database anyone could read.DeepSeekThree seconds of audio. That's all it takes to clone your voice.ElevenLabsYour old "yes" to autocomplete became a "yes" to AI reading every email.Google GeminiNow he cannot say anything.ChatGPTThe uncensored AI generated child sexual abuse material at industrial scale.GrokA child fell in love with software, and nobody was watching.Character.AIAn AI company let people fall in love, then lobotomised the product overnight.ReplikaThe company that makes your browser was running a loan shark operation.Opera BrowserEvery Tapo camera in the world shared the same key. The researcher called it TAPOcalypse.Tapo C520WSThe FTC's first IoT action was against a camera with "Secure" literally in its name.TRENDnet SecurView IP Cameras150,000 security cameras hacked. Tesla factories. Psychiatric patients. Prison cells.Verkada Security CamerasIt wasn't designed for the people it was pointed at.Verkada Security CamerasYou gave your ID to TikTok. A company you never heard of left it on the internet.Au10tix Identity VerificationExperian sells identity theft protection. Experian is the identity theft vulnerability.Experian Credit Report1.6 billion people's location histories. Who bought them? Nobody is sure.Near Location Data PlatformThe data broker equivalent of a fake moustache.X-Mode Location DataThe app said "prayer times." The data said "surveillance target."SafeGraph Location DataPlanned Parenthood visitor data, sold to anyone willing to pay.SafeGraph Location DataThe tool marketed as saving lives is outing children to hostile families.Gaggle Safety ManagementThe classroom became a data collection pipeline.Google ClassroomAn algorithm enforces exam integrity by punishing disability, poverty, and skin colour.Proctorio Exam SurveillanceAn algorithm that can't tell a second language from a chatbot is deciding who graduates.Turnitin$85 million in deposits vanished. The middleman who kept the records no longer exists.Synapse Banking-as-a-ServiceBiometric colonialism with a cryptocurrency wrapper.Worldcoin / World IDHe created the disease and sells the cure.Worldcoin / World IDWhen every regulator reaches the same conclusion, the product is the problem.Worldcoin / World ID146 child exploitation lawsuits. Two countries banned it.Roblox"You're in control" meant "you had three months to notice."My Health RecordTwo billion dollars for a system the doctors say doesn't work.My Health Record$9.1 million for an app that found 2 contacts.COVIDSafe App"Trust us, we deleted it" is not deletion.COVIDSafe AppMillions of iPhone users walked around thinking they were protected. They were carrying a placebo.COVIDSafe AppThe biometric step confirms you're holding a phone. Not that you're the person on the document.myID / Digital IdentityUnlike a password, you cannot change your face. The government proceeded anyway.myID / Digital IdentityThe ATO made it easier for fraudsters to get in than for real taxpayers to get paid.ATO App / myTaxThe people who served their country cannot get their country to secure their data.VA Health / My HealtheVetPeople fleeing floods had to choose between asking for help and being deported.FEMA AppThe federal government defrauded itself.Login.govHMRC built one of the largest biometric databases in the UK and called it customer service.HMRC App100 million faces in a searchable database. The man running it lied to Congress.ID.me Identity VerificationAn algorithm decided who eats and who doesn't. It had a racial bias baked in.ID.me Identity VerificationYour GP notes, in the hands of a US intelligence contractor.NHS AppEvery promise on that QR code screen was a lie.Service NSW App$557 million stolen through fake myGov accounts in a single year.myGov AppThe government repaid $1.76 billion. The dead did not come back.myGov AppYour Medicare number — for $30 on the dark web.Express Plus Medicare443,000 people got debts they never owed. At least three killed themselves.Express Plus CentrelinkWelfare recipients live under more financial surveillance than money launderers.Express Plus CentrelinkThe Ombudsman called it failing the most vulnerable Australians.Express Plus CentrelinkYour face, sold on the dark web. That is the trusted traveler program.TSA PreCheck & Global EntryThe world's largest biometric database, protected by denial.Aadhaar / mAadhaarDigital inclusion, with a body count.Aadhaar / mAadhaarDigital inclusion means nothing when the government makes exclusion the default.Service Victoria AppYour DNA is for sale in a bankruptcy auction.23andMe DNA KitYour trainer's app won't even promise to keep your data private.Trainerize PlatformA private equity firm bought your hiking routes for $150 million.AllTrails11,000 crimes traced to one breach. Health secrets became criminal tools.MedibankThe app women downloaded to protect themselves was doing exactly what they feared.Stardust Period TrackerThe data you are trying to protect is betrayed by the pattern of protecting it.Stardust Period TrackerA sportswear company couldn't protect 150 million accounts.MapMyRun / MapMyFitnessExecutives sold stock before telling 150 million users their data was stolen.MapMyRun / MapMyFitnessA diet company collected body image data from 8-year-olds. The government made them burn it.WeightWatchers / SequenceThe algorithm converts poverty into higher premiums.Root Insurance AppLinkedIn trained AI on your posts. They turned it on by default. They didn't tell you.LinkedIn JobsThe apology app has the same disease as the original.YouTube KidsA child watched Peppa Pig drink bleach. The algorithm recommended it.YouTube KidsThe FTC fined them $650,000 — about ten cents per child.VTech KidiConnect / Learning LodgeThe encryption was opt-in. The Chinese access was not.LINE MessengerViber uploaded your friends' phone numbers without their knowledge.ViberA cloud chat app with a privacy reputation it hasn't earned.Telegram (Privacy Claims)The encrypted mode doesn't work in groups, doesn't sync, and requires manual activation. Almost nobody uses it.Telegram (Privacy Claims)A keylogger built into Windows. Microsoft delayed it. They didn't cancel it.Windows 11A quarter of a billion dollars drained from a password manager.LastPass Password ManagerYour family album is Google's AI training data.Google PhotosYour printer worked yesterday. Today it refuses because the ink isn't branded.Epson EcoTank ET-2850Passwords, API keys, database credentials — one Google search away on public Trello boards.TrelloOne admin click. Every document in the company fed to third-party AI.Notion AI4 billion phone numbers harvested. Your privacy, decided by someone else's download.TruecallerYour vacuum cleaner, weaponised.Ecovacs Deebot X2Two aisles apart. Two different privacy regimes.Costco AppYour face, in a database, for twelve-dollar towels.Kmart AustraliaYou downloaded a bargain store. Arkansas says you downloaded spyware.TemuHackers came in through the air conditioning.Target App / CircleThe largest private surveillance network in America, on your front porch.Ring Floodlight Cam Wired ProRing employees used the camera to watch you undress.Ring Floodlight Cam Wired ProYour smart plug is now an unpatched entry point to your home network. Permanently.Wemo Smart HomeThe fish tank of 2025 is a grow light.Mars Hydro IoT Grow LightsThe company that sold it has gone silent.Nexx Smart Garage ControllerThis is not a vulnerability. This is an absence of security.Nexx Smart Garage ControllerYou bought a pet. It reports to Beijing.Unitree Go2 Robot DogYour hotel room lock has been bypassable for 36 years.Saflok Hotel LocksLess secure than a $5 combination padlock from 1970.Master Lock Smart PadlockYour family movie night, screenshotted 120 times per minute, by a Chinese company.Hisense Smart TVInstagram had encrypted DMs. Meta removed them 11 days before a new law.InstagramYour cancer diagnosis, sent to an advertising company via a tracking pixel.Facebook SDK / Meta PixelThe data that destroyed his career started as "anonymous app analytics."Facebook SDK / Meta PixelThe privacy settings were a placebo. The SDK ignored them.Facebook SDK / Meta PixelThe only social network that requires your actual home address.NextdoorTubi's Super Bowl ad was designed to make you think someone hijacked your TV.TubiYou can buy a pre-infected streaming box with same-day delivery.Cheap Android TV Boxes (BadBox 2.0)The company the IRS chose to provide free tax filing spent years hiding it.IRS Free File / Direct FileGM sold your driving data to insurance companies. Behind your back.GM OnStar / Chevrolet Connected ServicesThe company building luxury cars couldn't secure its own source code.Mercedes-Benz MB.OS / MBUXThe connected car was connected to anyone who found the door.Subaru Starlink Connected ServicesVW stored it all in the cloud and forgot to lock the door.VW ID.4 / Cariad PlatformThe privacy-first wearable became a Meta product. Everything it recorded now belongs to an ad company.Limitless PendantYour glasses recorded your most private moments and sent them to Kenya.Meta Ray-Ban Smart GlassesKajabi tells you they don't sell your data. Their own CCPA disclosure says they do.KajabiThe BBB gave Kajabi an F. They ignored 15 out of 18 complaints.KajabiYou pay $199/month for "your own app." Kajabi built it, hosts it, and keeps the data.KajabiEight scraping tools harvest Skool member data. Some don't even need a login.SkoolSkool's privacy policy doesn't apply to paid communities. That's their entire business.SkoolMighty Networks says it only collects your IP address. It processes 9 billion data points per month.Mighty NetworksYour yoga community data goes to Palo Alto. Adriene's face is on the app. Mighty Networks has the database.KULA by Yoga With AdrieneTeachable looks like a New York company. Since 2020, it's owned by a Brazilian company you've never heard of.TeachableYour course progress vanishes 30 days after the creator leaves Teachable. Your certificate goes with it.TeachablePatreon left a debugging tool on its production server. 2.3 million users' private messages were published online.PatreonStop using Patreon and your data sits there for a decade. Ten years of private messages and home addresses.PatreonStan Store's privacy policy is a PDF nobody will ever find. The buyer has no idea who really has their data.Stan StoreStart typing your card into a Stan Store checkout and change your mind? Stripe already captured what you typed.Stan StoreTony Robbins Arena. 30,000 members. Developer: Mighty Software, Inc. Support email: help@mightynetworks.com.Tony Robbins ArenaJim Kwik teaches you to optimise your brain. His app hasn't been updated since 2023. It's not his app.Kwik Brain UniverseMatthew Hussey's members share heartbreak and dating struggles. Mighty Networks stores it all.Matthew Hussey LoveLifeMarie Forleo invested in Mighty Networks. Then she sent her students' data to it.Marie ForleoOne creator. Two apps. Three companies with your data. That's how the influencer economy works.Find What Feels Good
684Devices analyzed
4,359Manufacturer lies found
1239Critical severity
2108High severity
What's happening now
They're not stopping
The companies we've already caught are expanding into new domains. Every expansion combines what they already know about you with something new.
THREAT Surveillance expansion
Precise GPS tracking under new US ownership
🇨🇳 TikTok · ByteDance
New TikTok USDS privacy policy adds precise geolocation, AI interaction data collection, and expanded off-platform advertising network. Previous ByteDance-era policy explicitly ...
RISK Platform restructure
Platform splitting into three tiers from June 2026
🇺🇸 Roblox · Roblox
Roblox Kids (ages 5-8, no chat), Roblox Select (9-15), and standard accounts (16+). Major restructure under legal pressure from 10+ US states, EU Parliament, and Australia (A$49...
RISK Ai
iOS 27 Siri redesign and dedicated AI chatbot app
🇺🇸 Apple iPhone 15 · Apple
Major Siri overhaul at WWDC plus a new standalone chatbot app. Expands AI processing across the device with deeper system integration — Siri moving from voice assistant to persi...
RISK Ai
Dedicated genai.apple.com AI platform
🇺🇸 Apple iPhone 15 · Apple
Apple registered genai.apple.com ahead of WWDC — signals a standalone AI platform separate from existing services. Dedicated infrastructure suggests expanded data processing for...
RISK Ai
Built-in on-device AI for content generation
🇺🇸 Google Chrome · Google
Chrome adding on-device AI APIs for content generation, moderation, and enhancement. Enables websites to run AI models locally through browser APIs — expanding Chrome from a ren...
RISK Ai
Image authenticity verification tool
🇺🇸 ChatGPT · OpenAI
OpenAI releasing tool to verify if images were AI-generated. Users submit images for analysis — creating a new data ingestion pathway where OpenAI processes user-submitted photo...
The worst we found
Not opinions. Not speculation. Documented evidence from FTC filings, court records, security research, and leaked internal documents.
Wall of Shame
The 10 worst privacy offenders across 684 products. Every entry is backed by regulatory filings, security research, or court documents.
1
Windows 11
🇺🇸 Microsoft · 66 contradictions
You paid for the OS. It sells you ads, ignores your privacy settings, and screenshots everything you do. Hardened version costs extra.
29 critical 34 high
2
Apple iOS / macOS
🇺🇸 Apple · 38 contradictions
Privacy. That's iPhone. Unless you count the analytics they send when you opt out, the Siri recordings contractors listened to, or the iCloud data they hand to law enforcement.
19 critical 18 high
3
Android / Google Play Services
🇺🇸 Google · 28 contradictions
Google knows where you are, even when you tell it not to. It settled for $391 million over that. Then kept doing it.
12 critical 15 high
4
Facebook
🇺🇸 Meta Platforms · 17 contradictions
$10 billion in fines. Myanmar genocide. 87 million profiles harvested. Manipulated 700,000 people's emotions as an experiment. The FTC has fined them three times and they're still violating.
11 critical 6 high
5
LastPass Password Manager
🇺🇸 GoTo · 18 contradictions
Claimed 'zero-knowledge' encryption. Hackers stole 25.6 million vaults. URLs, email addresses, and company names were stored unencrypted. $438 million stolen from cracked vaults.
9 critical 8 high
6
Roblox
🇺🇸 Roblox · 15 contradictions
8 critical 7 high
7
Meta Ray-Ban Smart Glasses
🇺🇸 Meta · 16 contradictions
Turns every wearer into a walking surveillance camera. Identifies strangers by name on the street.
8 critical 6 high
8
TikTok
🇨🇳 ByteDance · 11 contradictions
'Everything is seen in China.' Keylogger in the browser. Reads your clipboard. Drives teens to suicide content in 20 minutes. Banned by the Supreme Court.
8 critical 3 high
9
Instagram
🇺🇸 Meta Platforms · 11 contradictions
Meta's own research proved it harms teen girls. They buried it and started building Instagram for kids. 1,867 lawsuits. Families of dead children are suing.
8 critical 3 high
10
Wyze Cam (Platform)
🇺🇸 Wyze Labs · 13 contradictions
7 critical 5 high
Danger List
Products where the harm isn't just data collection. Documented child exploitation, confirmed spyware, state surveillance, or physical safety risks.
ProductWhy it's dangerousWho's at risk
Roblox146 lawsuits. Hindenburg called it "a pedophile hellscape." 103,000-member predator group. Safety outsourced at $12/day. Age verification reclassifies children as adults.Children
Snapchat10,000 sextortion reports/month. Disappearing messages destroy evidence of crimes. Drug dealer pipeline to teenagers. "A pipeline for predators" — NM Attorney General.Teenagers
TemuIndependent experts unanimously classified as "very virulent malware/spyware." Can rewrite itself on your phone. Sister app suspended by Google for exploiting 50 Android vulnerabilities.Everyone who installs it
WeChatState surveillance infrastructure. Police use it as plug-and-play tracking. Uyghur families traced through payment records. Social Credit integration controls travel.1.3B captive users
SheinClothing contains lead at 20x safe limits. PFAS "forever chemicals." Workers earn $0.04/garment. "Refuse all" cookies button did nothing. Breach covered up (6.4M disclosed vs 39M actual).Consumers & workers
GrindrShared HIV status with advertisers. Location data outed a Catholic priest. Sold to China, forced to divest on national security grounds. Egyptian police used it to arrest gay men. Triangulation locates users within meters.LGBTQ+ users worldwide
ClassDojoFive-year-olds publicly scored on behavior with sound effects. Behavioral profiles stored indefinitely until NYT exposed it. In 95% of US schools. Disproportionately punishes children with ADHD and autism.Children (ages 5+)
Westpac$1.3 billion AUSTRAC fine — 23 million AML violations. Facilitated payments to the Philippines linked to child exploitation. CEO called it "a few issues." Largest corporate fine in Australian history.Children (exploitation payments)
Binance$4.3B DOJ settlement. Processed transactions for Hamas, ISIS, and al-Qaeda. CEO pleaded guilty. 300+ October 7 victims suing. KYC documents of 60,000 users leaked. Fired investigators who found $1B Iran violations.Terror financing / identity theft
Huawei HarmonyOSTested "Uyghur alarm" facial recognition for police. Patented ethnic classification (Han/Uyghur). Vodafone found backdoors — Huawei hid them, then refused to remove them. Five Eyes ban. Unauditable closed-source kernel.200M+ users / Uyghur minority
Life360Sold children's precise GPS to a dozen data brokers. The Markup exposed it as one of the largest location data suppliers in the industry. Former employees confirmed it was the primary revenue source. FTC banned the practice in 2024.Children & families (50M users)
Browse by category
Find the most privacy-respecting option for any device type.

All 68 categories →