{
  "slug": "canary-mail",
  "category": "email-clients",
  "name": "Canary Mail",
  "description": "Email app for macOS, iOS, Android and Windows with built-in PGP encryption, tracker blocking and AI features.",
  "website": "https://canarymail.io",
  "license": null,
  "platforms": [
    "macos",
    "ios",
    "android",
    "windows"
  ],
  "jurisdiction": {
    "code": "SG",
    "name": "Singapore",
    "eyes": null,
    "eu": false,
    "gdpr": false,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 42,
  "coverage": 100,
  "summary": "Canary Mail scores 42 out of 100 (grade D) on the email clients criteria. It meets 3 of 8 criteria: no ads or data sales, OpenPGP support and works with any provider. It partly meets connects directly and blocks remote content. It does not meet open source, no trackers or telemetry and independent audit. It is based in Singapore: Not in the Five, Nine or Fourteen Eyes.",
  "url": "https://privacyratings.com/email-clients/canary-mail/",
  "markdown": "https://privacyratings.com/email-clients/canary-mail/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://reports.exodus-privacy.eu.org/en/reports/io.canarymail.android/latest/",
      "note": "Exodus finds Facebook Analytics, Firebase Analytics and Crashlytics in the Android app, and the website uses Google Tag Manager and HubSpot."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://canarymail.io/pricing",
      "note": "Funded by paid plans. The app shows no ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "openpgp": {
      "title": "OpenPGP support",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://canarymail.io/faq",
      "note": "PGP is built into all apps, with key generation and management. Encryption requires the Pro+ plan."
    },
    "no_cloud_relay": {
      "title": "Connects directly",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://canarymail.io/privacy",
      "note": "Mail and credentials stay on the device, but push notifications on mobile and Cloud Sync store credentials and message details on Canary servers."
    },
    "remote_content_blocked": {
      "title": "Blocks remote content",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://canarymail.io/features/security",
      "note": "Tracking pixels are blocked by default, but other remote images still load."
    },
    "any_provider": {
      "title": "Works with any provider",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://canarymail.io/help/whats-new",
      "note": "Works with any IMAP and SMTP provider, plus Gmail, Outlook and Exchange accounts."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Analytics",
        "host": "inline code",
        "effect": "no"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "HubSpot",
        "host": "js-na2.hs-scripts.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T07:02:34.649Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}