SMS and voice APIs
Textbelt privacy rating
SMS API with a paid hosted service and an open-source self-hosted version that sends through carrier email-to-SMS gateways.
Summary
Textbelt is not graded yet: 48% of its criteria have evidence, and 60% is needed. It partly meets open source, TLS configuration and modern web standards. It does not meet no trackers or telemetry and security headers. Still needing evidence: no ads or data sales, independent audit, transparency report, tells users about requests, message content deleted or redacted and EU data location. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B, Mozilla HTTP Observatory grade D- and Internet.nl website score 73%.
Not graded yet: 48% of criteria have evidence, 60% needed. How scoring works
Criteria
-
Partial
Open source Weight 3 of 3
Is all the source code needed to run the product public?
The self-hosted version is MIT-licensed. It uses a different, free sending method, and the code of the paid hosted service is not public.
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The website loads analytics.js with a Google Analytics ID.
-
Unknown
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Needs evidence. Add it
-
Unknown
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Needs evidence. Add it
-
Unknown
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Needs evidence. Add it
-
Unknown
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Needs evidence. Add it
-
Unknown
Message content deleted or redacted Weight 3 of 3
Can the text of messages be kept from being stored after delivery?
Needs evidence. Add it
-
Unknown
EU data location Weight 1 of 3
Can messages, call records and logs be processed and stored in the European Union?
Needs evidence. Add it
Automated tests
-
Partial
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade B
-
No
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade D- (25/100+)
-
Partial
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Score 73%