'%3e%3cpath%20d='M138%2095.6436V147H0V0H138V51.3564H59.3526V95.6436H138Z'%20fill='white'/%3e%3cpath%20d='M208%200V147H150V0H208Z'%20fill='white'/%3e%3cpath%20d='M361%200V51.4292H321.377V147H261.731V51.4292H220V0H361Z'%20fill='white'/%3e%3cpath%20d='M512%200V51.4292H472.939V147H414.139V51.4292H373V0H512Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_1_12'%3e%3crect%20width='512'%20height='147'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Scan results
YouTube
iOSYouTube is Google's video sharing platform enabling users to watch, upload, and share videos with personalized recommendations. The iOS app includes Chromecast support, offline playback, and YouTube Premium subscription options.
Quick Verdict
Best for: Watching videos without deep privacy concerns
Not For: You want to limit ad-tracking across platforms
What It Means For You
Viewing habits, interests, and device activity are collected and linked to a user's Google account to personalize ads. Multiple third-party services receive data about how the app is used. Data travels securely, but the scope of what is gathered is broad.
Quick Verdict
Best for: Watching videos without deep privacy concerns
Not For: You want to limit ad-tracking across platforms
What It Means For You
Viewing habits, interests, and device activity are collected and linked to a user's Google account to personalize ads. Multiple third-party services receive data about how the app is used. Data travels securely, but the scope of what is gathered is broad.
Method and Limitations
Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.
Findings (16)
Data Security
1 totalNetwork Security
3 totalCode Security
3 totalPrivacy
9 totalThird-Party Services
Security Strengths
- ✓Firebase Analytics explicitly disabled
- ✓SKAdNetwork privacy-preserving ad attribution
- ✓App attestation framework for anti-tampering
- ✓CryptoKit implementation for modern cryptography
- ✓Comprehensive HTTPS enforcement (except carrier billing)
Version diff is on the Developer plan. See developer plans.
Context Tags
Package
com.google.ios.youtube
Version
21.12.4 (Build 21.12.4)
Analysis Date
Mar 27, 2026
Classes Analyzed
127
Was this analysis helpful?
Feedback helps us improve our analysis
Recommendation: Use With Caution
Key Findings
Data Security - 1 finding (1 medium)
Network Security - 3 findings (1 high, 1 medium, 1 info)
Code Safety - 0 findings
Privacy - 9 findings (1 critical, 1 high, 3 medium, 4 info)
Privacy Concerns
What Data is Collected
YouTube collects data tied directly to a user's Google account, including watch history, search terms, video interactions, inferred interests, and device identifiers. This information builds a detailed profile of user preferences used for ad personalization across Google's services.
Third-Party Data Sharing
The following third-party services were observed receiving data through the app:
- Firebase Core - Google analytics and diagnostics
- IGListKit - UI rendering library
- OpenCV - Image and video processing
- WebRTC - Real-time media streaming
- TensorFlow Lite - On-device machine learning for recommendations
- Lottie - Animation rendering
- Breakpad - Crash diagnostics
- Widevine CDM - Protected content playback
Understanding the Scores
| Category | Score |
|---|---|
| Security | 84/100 |
| Privacy | 64/100 |
| Data Security | 98/100 |
| Network Security | 77/100 |
| Code Safety | 100/100 |
| Data Collection | 64/100 |
| Data Sharing | 92/100 |
| User Control | 72/100 |
Positive Security Features
- No notable positive security features were identified for this version of the app.
Areas for Improvement
- The scope of data collected about viewing habits and linked to a user's Google account is broad, with limited ability to use the app without contributing to an advertising profile that extends across Google's services.
- Some network connections handling user activity could be better secured against interception by third parties on shared or public networks.
- Controls for limiting what data is collected or how long it is retained are minimal within the app itself, leaving most privacy decisions outside the user's direct reach.
About This Analysis
App Details
| Field | Value |
|---|---|
| App | com.google.ios.youtube |
| Version | 21.12.4 (Build 21.12.4) |
| Scan Date | 2026-03-27 |
| Analysis Type | Static analysis |
Right of Reply
Developer not yet contacted