{
  "slug": "android",
  "category": "mobile-operating-systems",
  "name": "Android",
  "description": "Google's mobile operating system, shipped on Pixel phones with Google Mobile Services such as Google Play, Play services and Google apps on top of the open source Android base.",
  "website": "https://www.android.com",
  "source": "https://android.googlesource.com",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 25,
  "coverage": 100,
  "summary": "Android scores 25 out of 100 (grade F) on the mobile operating systems criteria. It partly meets open source and independent audit. It does not meet no trackers or telemetry and no ads or data sales. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/mobile-operating-systems/android/",
  "markdown": "https://privacyratings.com/mobile-operating-systems/android/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://android.googlesource.com/",
      "note": "The Android Open Source Project is mostly Apache-2.0, but Google Play services, Google apps and parts of the Pixel software are closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://support.google.com/accounts/answer/6078260",
      "note": "Google Play services and Google apps send usage and device data to Google, and some data is sent even with usage and diagnostics turned off; the website loads Google Tag Manager."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "no",
      "evidence": "https://policies.google.com/technologies/ads",
      "note": "Google is funded by advertising and uses an advertising ID and account data for ad targeting."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://services.google.com/fh/files/misc/2026_android_security_paper.pdf",
      "note": "Android devices hold Common Criteria and FIPS 140 certifications from accredited labs, but no full audit report is published by Google."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Fonts",
        "host": "fonts.googleapis.com",
        "effect": "none"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T06:38:32.575Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}