# Twilio Authy privacy rating

Two-factor authentication app from Twilio that generates one-time codes and supports push approvals, with encrypted cloud backups tied to a phone number. Available for Android and iOS.

## Summary

Twilio Authy scores 20 out of 100 (grade F) on the two-factor authentication criteria. It meets 1 of 4 criteria: no ads or data sales. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

- Website: https://www.authy.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Platforms: Android, iOS
- Home page trackers: Google Tag Manager, TrustArc (not scored), VWO
- Category: [Two-factor authentication](https://privacyratings.com/two-factor-authentication/)
- Also rated: [SendGrid](https://privacyratings.com/email-sending/sendgrid/) (Email sending services), [Twilio](https://privacyratings.com/communications-apis/twilio/) (SMS and voice APIs)
- Grade: F (20/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The Exodus report finds Google Crashlytics and Google Firebase Analytics in the Android app, and the website loads Google Tag Manager, Segment and VWO. | https://reports.exodus-privacy.eu.org/en/reports/com.authy.authy/latest/ |
| No ads or data sales | Yes | Free app with no ads, run by a paid communications platform. Twilio's privacy notice states it does not sell data to third parties. | https://www.twilio.com/en-us/legal/privacy |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/two-factor-authentication/twilio-authy/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/two-factor-authentication/twilio-authy.md