Email clients
Himalaya privacy rating
Command-line email client that manages mail over IMAP, JMAP, SMTP, Maildir, the Gmail API and Microsoft Graph, with composing and reading handled by the companion MML tool.
Summary
Himalaya scores 83 out of 100 (grade B) on the email clients criteria. It meets 6 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, connects directly, blocks remote content and works with any provider. It partly meets OpenPGP support. It does not meet independent audit.
Score 83 out of 100. How scoring works
Criteria
-
Yes
Open source Weight 3 of 3
Is all the source code needed to run the product public?
MIT or Apache-2.0.
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No telemetry or analytics in the source code.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by NLnet grants and donations. No ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Partial
OpenPGP support Weight 2 of 3
Can the app encrypt and sign mail with OpenPGP, built in or through an official add-on?
PGP signing and encryption are handled by the separate MML tool from the same project, built with its gpg feature.
-
Yes
Connects directly Weight 3 of 3
Does the app connect directly to your mail server, without passing mail or passwords through the vendor's servers?
Connects directly to mail servers. Passwords are read from a local password manager command.
-
Yes
Blocks remote content Weight 2 of 3
Are remote images and tracking pixels blocked by default?
Command-line client that does not load remote content. HTML is rendered to plain text.
-
Yes
Works with any provider Weight 1 of 3
Does the app work with any standard IMAP and SMTP provider?
Works with any IMAP, JMAP and SMTP provider, plus Gmail and Microsoft 365 through their APIs.