# Thunderbird for Android privacy rating

Open-source email app for Android from the Thunderbird project, based on K-9 Mail, which remains available as a variant. Works with any IMAP, POP3 and SMTP provider.

## Summary

Thunderbird for Android scores 89 out of 100 (grade B) on the email clients criteria. It meets 6 of 8 criteria: open source, no trackers or telemetry, no ads or data sales, connects directly, blocks remote content and works with any provider. It partly meets independent audit and OpenPGP support. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://www.thunderbird.net/en-US/mobile/
- Source code: https://github.com/thunderbird/thunderbird-android
- License: Apache-2.0
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: none found
- Category: [Email clients](https://privacyratings.com/email-clients/)
- Also rated: [Mozilla Thunderbird](https://privacyratings.com/email-clients/mozilla-thunderbird/) (Email clients)
- Grade: B (89/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | Apache-2.0. | https://github.com/thunderbird/thunderbird-android/blob/main/LICENSE |
| No trackers or telemetry | Yes | Collects no telemetry, and any future telemetry is opt-in. Exodus finds 0 trackers. | https://support.mozilla.org/en-US/kb/thunderbird-android-telemetry |
| No ads or data sales | Yes | Free app funded by donations. No ads. | https://www.thunderbird.net/en-US/mobile/ |
| Independent audit | Partial | 7ASecurity audited K-9 Mail, now Thunderbird for Android, with OSTIF and published the full report, but it is more than three years old. The app also passes Google's annual CASA Tier 2 assessment, and only the certification is public (github.com/thunderbird/thunderbird-android/security). | https://7asecurity.com/reports/pentest-report_k-9_mail.pdf |
| OpenPGP support | Partial | PGP needs the separate OpenKeychain app. | https://docs.k9mail.app/en/6.400/security/pgp/ |
| Connects directly | Yes | Connects directly to mail servers. Mail, contacts and account details stay on the device. | https://www.mozilla.org/en-US/privacy/thunderbird/ |
| Blocks remote content | Yes | Images load only after tapping Show pictures unless the user changes this setting. | https://docs.k9mail.app/en/6.400/settings/account/#always-show-images |
| Works with any provider | Yes | Works with any IMAP, POP3 and SMTP provider. | https://docs.k9mail.app/en/6.400/accounts/incoming_imap/ |

Source: https://privacyratings.com/email-clients/thunderbird-for-android/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/email-clients/thunderbird-for-android.md