# Bandwidth privacy rating

Communications platform and phone carrier with APIs for SMS, MMS, voice calls, emergency calling and phone numbers.

## Summary

Bandwidth scores 30 out of 100 (grade F) on the SMS and voice APIs criteria. It meets 2 of 10 criteria: TLS configuration and message content deleted or redacted. It partly meets no ads or data sales. It does not meet open source, no trackers or telemetry and security headers. Still needing evidence: independent audit, transparency report, tells users about requests and EU data location. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade C+.

- Website: https://www.bandwidth.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Fonts (not scored), Google Tag Manager, OneTrust (not scored), VWO
- Category: [SMS and voice APIs](https://privacyratings.com/communications-apis/)
- Grade: F (30/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The website loads Google Tag Manager, Marketo and VWO. |  |
| No ads or data sales | Partial | Funded by usage fees, but website identifiers and browsing data are shared with advertising networks for Bandwidth's own targeted advertising. | https://www.bandwidth.com/legal/privacy/ |
| Independent audit | Unknown |  |  |
| Transparency report | Unknown |  |  |
| Tells users about requests | Unknown |  |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=bandwidth.com&hideResults=on |
| Security headers | No | Grade C+ (60/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=bandwidth.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Message content deleted or redacted | Yes | Text message content is not stored, only metadata. Uploaded media is kept for up to 48 hours. | https://dev.bandwidth.com/docs/messaging/ |
| EU data location | Unknown |  |  |

Source: https://privacyratings.com/communications-apis/bandwidth/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/communications-apis/bandwidth.md