# Safari privacy rating

Apple's browser for macOS and iOS, built on the open-source WebKit engine.

## Summary

Safari scores 63 out of 100 (grade C) on the browsers criteria. It meets 3 of 8 criteria: no ads or data sales, fingerprinting protection and timely security updates. It partly meets open source, no trackers or telemetry, blocks trackers by default and no calls to big-tech services. It does not meet independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://www.apple.com/safari/
- Source code: https://github.com/WebKit/WebKit
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: none found
- Category: [Browsers](https://privacyratings.com/browsers/)
- Also rated: [iCloud Mail](https://privacyratings.com/email-providers/icloud-mail/) (Email providers), [Hide My Email](https://privacyratings.com/email-forwarding/hide-my-email/) (Email forwarding and aliases), [Apple Mail](https://privacyratings.com/email-clients/apple-mail/) (Email clients), [Apple App Store](https://privacyratings.com/app-stores/apple-app-store/) (App stores), [Apple Passwords](https://privacyratings.com/password-managers/apple-passwords/) (Password managers), [FileVault](https://privacyratings.com/file-encryption/filevault/) (File encryption), [iMessage](https://privacyratings.com/messengers/imessage/) (Messengers), [FaceTime](https://privacyratings.com/video-calls/facetime/) (Video calls), [iOS](https://privacyratings.com/mobile-operating-systems/ios/) (Mobile operating systems), [macOS](https://privacyratings.com/desktop-operating-systems/macos/) (Desktop operating systems), [Spotlight](https://privacyratings.com/launchers/spotlight/) (App launchers), [Apple Notes](https://privacyratings.com/notes/apple-notes/) (Notes), [Apple Journal](https://privacyratings.com/journaling/apple-journal/) (Journaling apps), [Apple iWork](https://privacyratings.com/office-suites/apple-iwork/) (Office suites), [QuickTime Player](https://privacyratings.com/screen-recording/quicktime-player/) (Screenshots and screen recording), [Apple Books](https://privacyratings.com/ebook-readers/apple-books/) (Ebook readers), [Apple Dictation](https://privacyratings.com/speech-to-text/apple-dictation/) (Dictation and transcription), [iCloud Drive](https://privacyratings.com/cloud-storage/icloud-drive/) (Encrypted cloud storage), [Apple Maps](https://privacyratings.com/maps/apple-maps/) (Maps and navigation), [SwiftUI](https://privacyratings.com/app-frameworks/swiftui/) (Cross-platform app frameworks), [Apple Home](https://privacyratings.com/smart-home/apple-home/) (Smart home), [Apple Watch](https://privacyratings.com/wearables/apple-watch/) (Wearables and health), [Apple Health Cycle Tracking](https://privacyratings.com/period-trackers/apple-health-cycle-tracking/) (Period trackers), [Apple Music](https://privacyratings.com/music-streaming/apple-music/) (Music streaming), [iCloud Photos](https://privacyratings.com/photo-management/icloud-photos/) (Photo management)
- Grade: C (63/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | The WebKit engine is open source. Safari itself is not. | https://github.com/WebKit/WebKit |
| No trackers or telemetry | Partial | No third-party trackers in the app, and sharing device analytics with Apple is opt-in. Apple web pages load Apple's own analytics (ac-analytics, sent to metrics.apple.com) by default. | https://www.apple.com/legal/privacy/data/en/device-analytics/ |
| No ads or data sales | Yes | No ads in the browser. Apple states it does not sell personal data. | https://www.apple.com/legal/privacy/en-ww/ |
| Independent audit | No | No independent audit is published. |  |
| Blocks trackers by default | Partial | Intelligent Tracking Prevention limits cross-site tracking by default but does not block tracker requests. | https://webkit.org/tracking-prevention/ |
| Fingerprinting protection | Yes | Standardizes fingerprinting data by default, such as limiting fonts to system and web fonts and freezing the user agent string. | https://webkit.org/tracking-prevention/ |
| No calls to big-tech services | Partial | Fraudulent Website Warning sends data to Google Safe Browsing and Apple, and can be turned off. Safari is built into Apple's operating systems and services. | https://www.apple.com/legal/privacy/data/en/safari/ |
| Timely security updates | Yes | Security fixes ship in Apple software updates, which can install automatically. | https://support.apple.com/en-us/100100 |

Source: https://privacyratings.com/browsers/safari/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/browsers/safari.md
