# Cross-platform app frameworks privacy ratings

Frameworks for building desktop and mobile apps from one codebase. Their tooling and SDKs can add telemetry to every app built with them.

**Our pick:** [Tauri](https://privacyratings.com/app-frameworks/tauri/): Small, fast apps for desktop and mobile from one web codebase, using the system web view instead of a bundled browser. A Rust core with a permission system, no telemetry, and a public independent audit. Pairs well with Svelte and TypeScript, as in the Forward Email apps (github.com/forwardemail/mail.forwardemail.net), which ship to Windows, macOS, Linux, Android and iOS from one Tauri, Svelte and TypeScript codebase.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Tauri](https://privacyratings.com/app-frameworks/tauri/) (our pick) | B (85/100) | Netherlands (Nine Eyes) | Framework for building desktop and mobile applications with a web frontend and a Rust backend, using the operating system's webview. |
| [Apache Cordova](https://privacyratings.com/app-frameworks/apache-cordova/) | B (80/100) | United States (Five Eyes) | Apache Software Foundation framework for building mobile apps with HTML, CSS and JavaScript, packaged in a native webview with plugins for device APIs. |
| [BeeWare](https://privacyratings.com/app-frameworks/beeware/) | B (80/100) | Unknown | Collection of Python tools for building native apps, including the Toga GUI toolkit that uses each platform's native widgets and the Briefcase packaging tool. |
| [GTK](https://privacyratings.com/app-frameworks/gtk/) | B (80/100) | United States (Five Eyes) | Toolkit for building graphical user interfaces, written in C with bindings for many languages. It is developed by the GNOME project. |
| [Iced](https://privacyratings.com/app-frameworks/iced/) | B (80/100) | Unknown | Cross-platform GUI library for Rust based on the Elm architecture, focused on simplicity and type safety. |
| [Kivy](https://privacyratings.com/app-frameworks/kivy/) | B (80/100) | Unknown | Python framework for cross-platform apps with multi-touch support, drawing its own GPU-accelerated widgets and using the KV design language. |
| [NativeScript](https://privacyratings.com/app-frameworks/nativescript/) | B (80/100) | United States (Five Eyes) | Framework for building native Android and iOS apps with JavaScript or TypeScript, giving direct access to native platform APIs, usable with Angular, Vue, React, Svelte or Solid. |
| [Wails](https://privacyratings.com/app-frameworks/wails/) | B (80/100) | Unknown | Framework for building desktop apps with Go and web technologies, using the operating system's native webview for the frontend. |
| [Slint](https://privacyratings.com/app-frameworks/slint/) | C (65/100) | Germany (Fourteen Eyes) | UI toolkit for building native user interfaces with a declarative markup language, with APIs for Rust, C++, JavaScript and Python, for desktop, mobile and embedded devices. |
| [.NET MAUI](https://privacyratings.com/app-frameworks/net-maui/) | D (50/100) | United States (Five Eyes) | Microsoft's cross-platform UI framework for building native Android, iOS, macOS and Windows apps from a single C# and XAML codebase. |
| [Avalonia UI](https://privacyratings.com/app-frameworks/avalonia-ui/) | D (50/100) | Estonia | Cross-platform UI framework for .NET that draws its own controls with XAML and C#, targeting Windows, macOS, Linux, Android, iOS and WebAssembly. |
| [Capacitor](https://privacyratings.com/app-frameworks/capacitor/) | D (50/100) | United States (Five Eyes) | Cross-platform native runtime for running web apps on Android and iOS and as progressive web apps, with a plugin API for native device features. |
| [Electrobun](https://privacyratings.com/app-frameworks/electrobun/) | D (50/100) | Unknown | Framework for building desktop apps in TypeScript, with a native layer written in Zig, Objective-C and C++, compact bundles and built-in differential updates. |
| [Electron](https://privacyratings.com/app-frameworks/electron/) | D (50/100) | United States (Five Eyes) | Framework for building cross-platform desktop applications with JavaScript, HTML and CSS by bundling Chromium and Node.js. |
| [Expo](https://privacyratings.com/app-frameworks/expo/) | D (50/100) | United States (Five Eyes) | Framework and tooling built on React Native for building Android, iOS and web apps, with a CLI, SDK modules, file-based routing and optional cloud build services. |
| [Flutter](https://privacyratings.com/app-frameworks/flutter/) | D (50/100) | United States (Five Eyes) | Google's UI toolkit for building natively compiled mobile, web and desktop apps from one Dart codebase, drawing its own widgets with its rendering engine. |
| [Framework7](https://privacyratings.com/app-frameworks/framework7/) | D (50/100) | Unknown | HTML and JavaScript framework for building mobile, desktop and web apps with an iOS and Material Design look, usable with Vue, React or Svelte. |
| [Fyne](https://privacyratings.com/app-frameworks/fyne/) | D (50/100) | Unknown | GUI toolkit for Go that builds desktop, mobile and web apps from a single codebase. |
| [Ionic](https://privacyratings.com/app-frameworks/ionic/) | D (50/100) | United States (Five Eyes) | UI toolkit of web components for building mobile, desktop and progressive web apps with HTML, CSS and JavaScript, usable with Angular, React or Vue. |
| [Jetpack Compose](https://privacyratings.com/app-frameworks/jetpack-compose/) | D (50/100) | United States (Five Eyes) | Google's declarative UI toolkit for Android apps, written in Kotlin, where interfaces are built from composable functions. |
| [Kotlin Multiplatform](https://privacyratings.com/app-frameworks/kotlin-multiplatform/) | D (50/100) | Czechia | JetBrains technology for sharing Kotlin code across Android, iOS, desktop, web and server, with Compose Multiplatform for shared user interfaces. |
| [Lynx](https://privacyratings.com/app-frameworks/lynx/) | D (50/100) | Unknown | Cross-platform framework for building native mobile and web interfaces with web technologies such as CSS and React, using a multi-threaded rendering engine. |
| [NW.js](https://privacyratings.com/app-frameworks/nw-js/) | D (50/100) | Unknown | Runtime that combines Chromium and Node.js for building desktop apps with HTML and JavaScript, with Node.js modules callable from the DOM. |
| [Quasar](https://privacyratings.com/app-frameworks/quasar/) | D (50/100) | Unknown | Vue.js-based framework for building web, mobile and desktop apps from one codebase, with a Material component library and a CLI. |
| [React Native](https://privacyratings.com/app-frameworks/react-native/) | D (50/100) | United States (Five Eyes) | Framework from Meta for building native Android and iOS apps with React and JavaScript or TypeScript, rendering platform-native UI components. |
| [Uno Platform](https://privacyratings.com/app-frameworks/uno-platform/) | D (50/100) | Canada (Five Eyes) | Cross-platform UI framework for .NET that runs C# and XAML apps on Windows, macOS, Linux, Android, iOS and WebAssembly, using WinUI APIs. |
| [Neutralinojs](https://privacyratings.com/app-frameworks/neutralinojs/) | D (40/100) | Unknown | Lightweight framework for building desktop apps with JavaScript, HTML and CSS, using the operating system's webview and a small native server instead of a bundled browser. |
| [Qt](https://privacyratings.com/app-frameworks/qt/) | F (35/100) | Finland | Cross-platform C++ application framework with the Qt Widgets and Qt Quick/QML user interface toolkits, for desktop, mobile and embedded devices. |
| [SwiftUI](https://privacyratings.com/app-frameworks/swiftui/) | F (35/100) | United States (Five Eyes) | Apple's declarative UI framework for building apps in Swift across iOS, iPadOS, macOS, watchOS, tvOS and visionOS. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?

Source: https://privacyratings.com/app-frameworks/