Mullvad VPN Security & Privacy Scorecard

Android

98
Overall trust score
Very Secure
97
Security
100
Privacy

The connection is routed through Mullvad's servers with no analytics or advertising SDKs collecting usage data. Google Play handles subscription billing, which means Google processes payment information. No third-party trackers or marketing services receive user activity.

Best for

Anyone who wants strong, no-nonsense VPN protection

Findings

  • 0 critical
  • 0 high
  • 1 medium
  • 1 low
  • 0 info

1 issue identified across security and privacy analysis.

Top security issues

  • Compose Preview Activity Exported in Production Build
  • VPN Service Intent Actions Callable Without Caller Validation

Full analysis

Mullvad VPN

Version: 2026.2 | Analyzed: 2026-03-21 | Platform: Android

Security Score: 97/100 | Privacy Score: 100/100

What This Means for You

The connection is routed through Mullvad's servers with no analytics or advertising SDKs collecting usage data. Google Play handles subscription billing, which means Google processes payment information. No third-party trackers or marketing services receive user activity.

Recommendation: Very Secure

Best For: Anyone who wants strong, no-nonsense VPN protection

Key Findings

Data Security - 0 findings

Network Security - 0 findings

Code Safety - 0 findings

Privacy - 0 findings

Privacy Concerns

What Data is Collected

Mullvad VPN collects only what is necessary to operate the connection. No analytics services, behavioral trackers, or advertising platforms are embedded in the app. Browsing activity and VPN usage remain private.

Third-Party Data Sharing

Google receives data through two integrations: Google Play Billing processes subscription payments, and Google Play Services provides core Android framework functions. No marketing companies, data brokers, or advertising networks receive information about user app usage or browsing behavior.

Understanding the Scores

Score Category Value
Security 97/100
Privacy 100/100
Data Security 100/100
Network Security 100/100
Code Safety 97/100
Data Collection 100/100
Data Sharing 100/100
User Control 100/100

Positive Security Features

  • No advertising or analytics SDKs present in the app
  • No behavioral profiling or user tracking of any kind
  • Complete user control over account and connection data
  • Third-party data sharing limited exclusively to payment processing via Google Play

Areas for Improvement

  • A small number of code safety findings point to implementation areas that could be further hardened in a future update.
  • Subscription billing is handled by Google Play, meaning Google processes payment details under Google's privacy policy rather than Mullvad's.
  • Users who want complete independence from Google services should note that Google Play Services integration is present as part of standard Android distribution.

About This Analysis

This scorecard is generated through automated static analysis of the app's code and configuration. Scores reflect the app's security architecture and data handling practices at the time of analysis.

App Details

Field Value
App Mullvad VPN
Package net.mullvad.mullvadvpn
Version 2026.2
Analyzed 2026-03-21
Platform Android

Versions & scan history

ScanDateOverall score
#3 (current) 98/100