Privacy Ratings

Two-factor authentication

Twilio Authy privacy rating

Two-factor authentication app from Twilio that generates one-time codes and supports push approvals, with encrypted cloud backups tied to a phone number. Available for Android and iOS.

United States Five EyesPlatforms: Android · iOS

Summary

Twilio Authy scores 20 out of 100 (grade F) on the two-factor authentication criteria. It meets 1 of 4 criteria: no ads or data sales. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

Score 20 out of 100. How scoring works

Criteria

  • No

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    Closed source.

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    The Exodus report finds Google Crashlytics and Google Firebase Analytics in the Android app, and the website loads Google Tag Manager, Segment and VWO.

    reports.exodus-privacy.eu.org

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Free app with no ads, run by a paid communications platform. Twilio's privacy notice states it does not sell data to third parties.

    twilio.com

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit is published.

Other two-factor authentication

All 18 two-factor authentication