# Sync.com privacy rating

End-to-end encrypted cloud storage and file sharing from Canada, with desktop, mobile and web apps.

## Summary

Sync.com scores 38 out of 100 (grade F) on the encrypted cloud storage criteria. It meets 3 of 8 criteria: no ads or data sales, tells users about requests and TLS configuration. It partly meets transparency report. It does not meet open source, no trackers or telemetry, independent audit and security headers. It is based in Canada: Five Eyes member. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade C-.

- Website: https://www.sync.com
- Jurisdiction: Canada. Five Eyes member.
- Platforms: Web, Windows, macOS, Android, iOS
- Home page trackers: Google Analytics, Google Tag Manager, HubSpot, LinkedIn Insight, Meta Pixel, Reddit Pixel, X (Twitter) Pixel
- Category: [Encrypted cloud storage](https://privacyratings.com/cloud-storage/)
- Grade: F (38/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The Android app includes Google Firebase Analytics, Crashlytics, Mixpanel and Sentry, and the website loads Google and Facebook advertising tags. | https://reports.exodus-privacy.eu.org/en/reports/com.sync.mobileapp/latest/ |
| No ads or data sales | Yes | Funded by paid plans, with no ads in the service. | https://www.sync.com/pricing-individual/ |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Partial | The privacy policy explains how legal requests are verified and answered, but no request counts are published. | https://www.sync.com/privacy/ |
| Tells users about requests | Yes | Sync commits to reasonable efforts to notify users before their information is disclosed, within the bounds of the law. | https://www.sync.com/privacy/ |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=cp.sync.com&hideResults=on |
| Security headers | No | Grade C- (45/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=cp.sync.com |
| Modern web standards | Not tested yet | Not tested yet. |  |

Source: https://privacyratings.com/cloud-storage/sync-com/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/cloud-storage/sync-com.md