ChatGPT Security & Privacy Scorecard

ChatGPT

Developer: OpenAI
Version: 1.2026.027 (Build 2602719)
Platform: Android
Scan Date: 2026-01-30

What This Means for You

Conversations and app usage are tracked by multiple analytics and behavioral data companies, including Segment and Firebase. Device details, session activity, and in-app interactions are collected and shared with third-party providers. For subscribers, billing behavior is also processed by external payment services.

Recommendation: Use With Caution

Best For: AI chat users comfortable with standard analytics
Avoid If: Sharing sensitive personal or health information

Key Findings

Data Security - 6 findings (3 high, 3 medium)

Network Security - 2 findings (2 low)

Code Safety - 0 findings

Privacy - 9 findings (2 critical, 2 high, 2 medium, 3 low)

Privacy Concerns

What Data is Collected

ChatGPT collects a broad range of data about user devices and behavior. This includes device identifiers, session activity, in-app interactions, and usage patterns. For users who create an account, account details and conversation history are stored. Subscription and billing information is processed when a plan is purchased.

Third-Party Data Sharing

User data is shared with several third-party services:

• Analytics and behavioral tracking: Segment, Firebase Analytics, Statsig, and Datadog RUM receive data about app usage and session activity.
• Error and performance monitoring: Sentry and Datadog RUM process technical performance data.
• Authentication: Auth0 handles user identity and login flow.
• Payments: Stripe and RevenueCat process subscription and billing data.
• Identity verification: Persona processes identity-related information.
• Real-time communication: LiveKit handles audio and video data during voice conversations.

Understanding the Scores

Positive Security Features

• Network security practices earned a strong score, with secure communication handling observed across the app's connections.
• User control features scored well, reflecting meaningful account and data management options available to users.

Areas for Improvement

• The app shares user behavioral data with multiple third-party analytics providers, expanding the number of companies that have access to usage patterns.
• Subscription and billing activity is processed by external payment services, adding additional parties to the financial data flow.
• The scope of data collection across device identifiers, session activity, and in-app interactions could be reduced to limit what is shared with outside parties.

About This Analysis

This scorecard is based on automated static analysis of the app's compiled code and configuration. Scores reflect observed practices at the time of the scan and may not capture all behaviors, particularly those occurring only at runtime or in specific user scenarios.

App Details

• App Name: ChatGPT
• Package ID: com.openai.chatgpt
• Version: 1.2026.027 (Build 2602719)
• Scan Date: 2026-01-30