CITT

    Scan results

    Grindr - Gay Dating & Chat

    Android

    Grindr is the world's #1 free dating app for the LGBTQ+ community. Connect with gay, bi, trans, queer users nearby for friendships, dates, and social experiences. Features chat, photo sharing, location-based discovery, and optional premium tiers for enhanced features and ad-free experience.

    CITT SCORE
    40
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Adults comfortable sharing sensitive data with many ad

    Not For: You keep your dating life or identity strictly private

    What It Means For You

    User profile, location, and activity are shared with over a dozen ad and analytics companies, including Facebook and Google. Sensitive personal data, including details that could reveal user identity and orientation, moves across multiple advertising networks. Several ad platforms display ads inside the app, meaning usage patterns fund targeted advertising.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (19)

    Data Security

    3 total
    1 Critical
    2 Medium

    Network Security

    2 total
    1 High
    1 Medium

    Code Security

    4 total
    1 High
    1 Medium
    2 Low

    Privacy

    7 total
    1 Critical
    3 High
    1 Medium
    2 Low

    Third-Party Risk

    2 total
    2 Medium

    Permission Usage

    1 total
    1 Medium

    Third-Party Services

    Firebase Analytics, Braze, AppsFlyer, Sift Science, Google AdMob, Facebook Audience Network, Unity Ads, IronSource, Vungle, Mintegral, InMobi, Agora RTC, FaceTec, Spotify SDK, Ketch, Bugsnag

    Security Strengths

    • ✓HTTPS enforced globally (cleartext traffic disabled)
    • ✓No JavaScript interfaces in WebView (prevents RCE)
    • ✓Privacy-conscious defaults (Firebase and Facebook SDKs disabled by default)
    • ✓Modern MVVM architecture with clean separation of concerns
    • ✓Cloud backup disabled (android:allowBackup=false)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    sensitive data
    location
    health
    lgbtq
    dating
    chat
    camera
    ads
    biometric

    Package

    com.grindrapp.android

    Version

    26.1.0

    Analysis Date

    Feb 4, 2026

    Classes Analyzed

    59,890

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (1 critical, 2 medium)

    Network Security - 2 findings (1 high, 1 medium)

    Code Safety - 0 findings

    Privacy - 7 findings (1 critical, 3 high, 1 medium, 2 low)

    Privacy Concerns

    What Data is Collected

    The app collects precise location, profile details, device identifiers, and in-app behavior. Personal information added to a profile, along with usage patterns and activity timing, is retained and processed by the app and its third-party partners.

    Third-Party Data Sharing

    Data flows to a large number of external platforms across advertising, analytics, and supporting services:

    • Analytics and Marketing: Firebase Analytics, Braze, AppsFlyer, Bugsnag
    • Advertising Networks: Google AdMob, Facebook Audience Network, Unity Ads, IronSource, Vungle, Mintegral, InMobi
    • Supporting Services: Sift Science, Agora RTC, FaceTec, Spotify SDK, Ketch

    Understanding the Scores

    CategoryScore
    Security45/100
    Privacy35/100
    Data Security30/100
    Network Security65/100
    Code Safety60/100
    Data Collection50/100
    Data Sharing55/100
    User Control45/100

    Positive Security Features

    No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • User data is shared with an unusually large number of advertising and analytics companies, giving many third parties simultaneous access to details about user identity and behavior.
    • User location and activity reach multiple ad networks at once, enabling them to build detailed behavioral profiles that can follow users across other apps and services.
    • The options available for limiting how widely user data is shared are restricted, making it difficult to use the app without accepting broad data collection across many platforms.

    About This Analysis

    This scorecard is generated from automated static analysis of the app binary. Scores reflect security and privacy practices observed in the code at the time of analysis.

    App Details

    • App Name: Grindr - Gay Dating & Chat
    • Package ID: com.grindrapp.android
    • Version: 26.1.0
    • Platform: Android
    • Analysis Date: 2026-02-04

    Right of Reply

    Developer not yet contacted