With approximately 257 billion app downloads worldwide in 2023, the demand for apps continues to rise. However, while these apps provide valuable services, they also collect significant amounts of personal data. Many apps gain extensive access to our information, from contact details to real-time location tracking. But which apps are the most invasive?
To find out, software solution provider Nsoft has analyzed the privacy terms and conditions of the world’s most popular apps. This small print reveals what type of data is collected, and which data is shared with third parties. They then counted every instance of data collection from each app to find out which one collects the most, and which ones share our data elsewhere.
You can read the full research here: https://www.nsoft.com/news/the-worlds-most-invasive-apps
Instagram and Facebook are the most invasive apps in the world, sharing 68.6% of personal data with third parties
| Rank | App | % of personal data shared with third parties | % of personal data collected for developer’s Advertising or Marketing | % of personal data collected for Analytics | % of personal data collected for Product Personalization | % of personal data collected for App Functionality | % of personal data collected for Other Purposes |
| 1 | Facebook/Messenger | 68.6% | 68.6% | 85.7% | 71.4% | 91.4% | 71.4% |
| Instagram/Threads | 68.6% | 68.6% | 85.7% | 71.4% | 91.4% | 71.4% | |
| 2 | 37.1% | 37.1% | 68.6% | 65.7% | 74.3% | 71.4% | |
| 3 | Amazon | 5.7% | 25.7% | 54.3% | 25.7% | 68.6% | 57.1% |
| 4 | YouTube: Watch, Listen, Stream | 31.4% | 34.3% | 45.7% | 34.3% | 65.7% | 11.4% |
| 5 | X | 28.6% | 28.6% | 42.9% | 37.1% | 51.4% | 25.7% |
| 6 | Uber Eats | 31.4% | 42.9% | 45.7% | 34.3% | 60.0% | 0.0% |
| 7 | PayPal | 8.6% | 25.7% | 25.7% | 25.7% | 54.3% | 65.7% |
| 8 | Uber | 0.0% | 40.0% | 51.4% | 42.9% | 57.1% | 0.0% |
| 9 | 22.9% | 25.7% | 48.6% | 28.6% | 62.9% | 0.0% | |
| 10 | Amazon Prime Video | 8.6% | 22.9% | 42.9% | 17.1% | 45.7% | 40.0% |
| 11 | Google Pay | 14.3% | 17.1% | 51.4% | 28.6% | 65.7% | 0.0% |
| 12 | Spotify – Music and Podcasts | 17.1% | 20.0% | 42.9% | 28.6% | 57.1% | 2.9% |
| 13 | Snapchat | 14.3% | 22.9% | 37.1% | 37.1% | 54.3% | 0.0% |
| Google Maps | 17.1% | 0.0% | 54.3% | 34.3% | 62.9% | 0.0% | |
| 14 | Shopee | 8.6% | 25.7% | 42.9% | 34.3% | 48.6% | 0.0% |
| TikTok | 22.9% | 14.3% | 25.7% | 17.1% | 60.0% | 17.1% | |
| 15 | Bumble | 2.9% | 25.7% | 28.6% | 31.4% | 51.4% | 11.4% |
| 16 | Gmail – Email by Google | 8.6% | 8.6% | 48.6% | 28.6% | 57.1% | 0.0% |
| 17 | Max: Stream HBO, TV, & Movies | 20.0% | 25.7% | 28.6% | 28.6% | 28.6% | 0.0% |
| 18 | WhatsApp Business | 5.7% | 5.7% | 48.6% | 5.7% | 57.1% | 14.3% |
| 19 | Duolingo | 20.0% | 11.4% | 40.0% | 5.7% | 45.7% | 8.6% |
| Candy Crush Saga | 8.6% | 28.6% | 34.3% | 17.1% | 40.0% | 0.0% | |
| Tinder | 5.7% | 17.1% | 34.3% | 28.6% | 42.9% | 0.0% | |
| 20 | Roblox | 0.0% | 20.0% | 42.9% | 25.7% | 37.1% | 0.0% |
Facebook and Instagram both take the title of the most invasive apps when it comes to collecting your personal data. Both apps share 68.6% of your personal data with third parties, and both take 85.7% of users’ personal data, with information such as search and purchase history, and health data being stored.
The career network site LinkedIn takes second place, taking a significant 74.3% of data towards app functionality, and taking 37.1% of your personal information to third parties. Amazon follows close behind, with 68.6% of data needed for the app to function. However, only 5.7% of personal data is shared with external bodies.
In the business category, LinkedIn is recognized as the most invasive app. For entertainment, YouTube stands out by sharing 31.4% of user data with third parties, making it the most intrusive in that category. Although Bumble shares a relatively low 2.9% of data with external entities, it still ranks as the most invasive dating app on the list.
Gaming apps are generally the least invasive, with Candy Crush Saga identified as the most intrusive among them, sharing just 8.6% of personal data with third parties.
Booking.com, fitpro, and Subway Surfers are among the safest apps, taking zero personal information
| Rank | App | % of personal data shared with third parties | % of personal data collected for developer’s Advertising or Marketing | % of personal data collected for Analytics | % of personal data collected for Product Personalization | % of personal data collected for App Functionality | % of personal data collected for Other Purposes |
| 1= | Subway Surfers | 0.0% | 0.0% | 0.0% | 0.0% | 0.0% | 0.0% |
| 1= | fitpro | 0.0% | 0.0% | 0.0% | 0.0% | 0.0% | 0.0% |
| 1= | Booking.com | 0.0% | 0.0% | 0.0% | 0.0% | 0.0% | 0.0% |
| 2 | LitMatch | 2.9% | 2.9% | 0.0% | 0.0% | 14.3% | 0.0% |
| 3 | Telegram Messenger | 0.0% | 0.0% | 0.0% | 0.0% | 31.4% | 0.0% |
| 4= | ChatGPT | 0.0% | 0.0% | 11.4% | 0.0% | 28.6% | 0.0% |
| 4= | Microsoft Authenticator | 0.0% | 0.0% | 17.1% | 0.0% | 22.9% | 0.0% |
| 5 | SHEIN – Shopping Online | 0.0% | 5.7% | 8.6% | 2.9% | 20.0% | 5.7% |
In contrast, The gaming app Subway Surfers, the fitpro health app, and Booking all take the top spot for the safest apps, where no ‘data linked to you’ section existed on the apps’ privacy terms and conditions pages, suggesting no personal data is stored at all.
When it comes to protecting the data of customers, Marin Marinčić, Head of IT Infrastructure from Nsoft says:
“Businesses need a zero-tolerance approach to data security, starting with minimizing data collection—only take what’s essential and make it clear to customers. Encryption is a must for both storage and data transfer, ensuring sensitive information stays safe even if there’s a breach. Frequent penetration tests and audits are non-negotiable to stay ahead of vulnerabilities, while access should be tightly controlled using a zero-trust model. Ultimately, transparency about data usage and storage is key; customers should know exactly what’s collected, why, and how it’s protected.”
