Privacy Ratings

Email clients

Thunderbird for Android privacy rating

Open-source email app for Android from the Thunderbird project, based on K-9 Mail, which remains available as a variant. Works with any IMAP, POP3 and SMTP provider.

United States Five EyesLicense: Apache-2.0

Summary

Thunderbird for Android scores 89 out of 100 (grade B) on the email clients criteria. It meets 6 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, connects directly, blocks remote content and works with any provider. It partly meets independent audit and OpenPGP support. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

Score 89 out of 100. How scoring works

Criteria

  • Yes

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Apache-2.0.

    github.com

  • Yes

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    Collects no telemetry, and any future telemetry is opt-in. Exodus finds 0 trackers.

    support.mozilla.org

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Free app funded by donations. No ads.

    thunderbird.net

  • Partial

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    7ASecurity audited K-9 Mail, now Thunderbird for Android, with OSTIF and published the full report, but it is more than three years old. The app also passes Google's annual CASA Tier 2 assessment, and only the certification is public (github.com/thunderbird/thunderbird-android/security).

    7asecurity.com

  • Partial

    OpenPGP support Weight 2 of 3

    Can the app encrypt and sign mail with OpenPGP, built in or through an official add-on?

    PGP needs the separate OpenKeychain app.

    docs.k9mail.app

  • Yes

    Connects directly Weight 3 of 3

    Does the app connect directly to your mail server, without passing mail or passwords through the vendor's servers?

    Connects directly to mail servers. Mail, contacts and account details stay on the device.

    mozilla.org

  • Yes

    Blocks remote content Weight 2 of 3

    Are remote images and tracking pixels blocked by default?

    Images load only after tapping Show pictures unless the user changes this setting.

    docs.k9mail.app

  • Yes

    Works with any provider Weight 1 of 3

    Does the app work with any standard IMAP and SMTP provider?

    Works with any IMAP, POP3 and SMTP provider.

    docs.k9mail.app

Other email clients

All 31 email clients