How popular foreign mobile apps are quietly exporting European’s most sensitive personal data—by country
This study examines data collection and sharing practices of the most downloaded mobile apps in the EU, which are controlled and owned by foreign entities. It also breaks down the foreign-owned, most-downloaded apps by individual member states.
Europeans may not be aware that their personal data is being shipped to authoritarian regimes and “third countries” when they use popular applications such as TikTok, AliExpress, and Shein—despite the General Data Protection Regulation’s (GDPR) restrictions on doing so.
We know that popular applications, including TikTok, AliExpress, Shein, and Temu have garnered millions of European users, and that they transfer EU personal data in staggering quantities to China—a jurisdiction characterized by government-mandated surveillance capabilities. A recent NOYB complaint was formally launched against these companies and many more, indeed, for evidence of unlawful data transfers to China-based data centers, where Chinese companies have no choice but to comply with any government requests for access to data.
Meanwhile, American-owned apps, including Facebook and Instagram, represent the largest segment of foreign applications with controlling interests in the US. Services like Meta deal with data collection practices encompassing users’ addresses, personal information, calendar events, genealogies, comprehensive behavioral profiles, and even ideological views or sexual orientation. It is now apparent that these data profiles can be weaponized, giving US authorities the ability to deny visa entry to EU citizens based on their social media comments.
In order to make understanding foreign-owned data harvesting and sharing more transparent, Incogni’s researchers examined the most popular Android apps by download in the EU (from dates ranging between August 2024 and 2025) that were developed and owned by companies outside of the EU. It summarizes the prevalence and data collection and sharing practices of the most popular foreign-owned applications in the European market, their number of downloads, their data collection methodologies, and the types of data collected and shared with third parties.
These applications collectively represent a major conduit for extensive personal data collection of Europeans, with significant implications for user privacy and data boundaries.
Key insights
- In Europe, the most popular foreign-owned apps were American-owned (Meta services) or Chinese-controlled (TikTok and Temu), with Telegram (UAE-born with complicated origins and alleged connections to Russia) and Viber Messenger from Japan being the next runner-ups.
- Most of Meta’s services can collect hundreds of data points from users, from their home address to credit scores, and calendar events through their apps (except WhatsApp).
- TikTok Lite and its primary version were the second most popular foreign apps in Europe. Extensive personal datasets included contact directories and sensitive financial information, and broader economic profiles like “user salary or debts.”
- While Telegram collects data types deemed sensitive by Incogni’s privacy experts— including precise location, full name, phone number, photos, videos, voice or sound recordings, files and documents, and contact directories—there was no indication that this data was shared or transmitted outside of EU borders.
The most popular applications downloaded in Europe, controlled by foreign interests
American-developed applications dominated the European landscape, with streaming platforms and Meta’s social media ecosystem representing the largest category of foreign apps. Chinese applications showed strong market penetration and rapid growth. TikTok and its variations were featured in most European states overall, making it the clear leader in terms of popularity.
Beyond the US-China duopoly, messaging platform Telegram led in 6 countries, and Viber (Japan-based) claimed a leading position in at least one national market.
On average, the investigated apps collect 19 data points and share 4. However, Meta’s apps inflated the averages (without which the remaining apps collect an average of 15 data types).
Meta’s services appear structured to potentially gather nearly every category of user data outlined in Google Play’s data safety guidelines. Instagram, Threads, and Messenger avoid only race and ethnicity information. This means Meta’s platforms can potentially access the full spectrum of user data—from home addresses and credit scores to calendar entries—across their app ecosystem, with WhatsApp being the sole exception to this comprehensive data collection approach.
TikTok Lite and the standard TikTok app ranked as the second-most popular applications in the studied regions. Compared to other apps in this study, both versions harvest many data types, including personal information, contact details, and “other financial info” (potentially including salary information or debt records). While TikTok Lite appears to access more data categories than its full counterpart, the developers claim that this lighter version does not share any collected data with external parties.
When it comes to handling user data, Incogni researchers paid close attention to what data is used for advertising, especially if it is shared with third parties for this purpose. To this end, Incogni researchers observed:
- Meta’s products (except WhatsApp) collects user ‘other financial info’, photo’s, videos, calendar events, files and docs, contacts and several other types of data for advertising
- Users’ approximate locations are collected for advertising by:
- Tubi
- Disney +
- Netflix
- HBO
- Pluto
- Skytime
- Viber
- Meta’s apps
- SkyShowtime collects and shares user data for advertising purposes
- User email addresses are shared with third parties for advertising purposes by:
- Tubi
- HBO Max (also share users’ names for that purpose)
- SkyShowtime (also share users’ names)
- Viber messenger
Incogni researchers also highlighted some alarming data collection practices.
- Threads, Instagram, and Messenger collect very sensitive data such as political or religious beliefs and sexual orientation and can even collect user credit scores
- Netflix can collect your voice or sound recordings
- Temu, HBO Max and the Meta apps (except WhatsApp) collect information about what apps users have installed on their phones
- 12 out of the 19 apps collect “other info” which can include things like “Any other personal information such as date of birth, gender identity, veteran status, etc.”
Country insights
United Kingdom
The most popular foreign apps in the United Kingdom for the last 12 months were: Netflix, Disney+ and Prime Video. They interact with an average of 12.7 data types, sharing an average of 5.7 and collecting an average of 12.7.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by Netflix at 12 data types (12 collected and none shared) and Disney+ at 9 (9 collected, 4 shared).
Netflix interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, other info, voice or sound recordings.
Disney+ interacts with 3 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, email address. It collects: other info.
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
Netflix collects the following sensitive data points: approximate location, email address, other info.
Disney+ collects and shares the following sensitive data points: approximate location Disney+ collects the following sensitive data points: email address, other info.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Netflix had a total of 25 purposes for collecting user data. Which means every collected data type has an average of 2.8 uses for the developers of the app. When it comes to sharing, Netflix shares no data.
Disney+ had a total of 32 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1.3 uses per data type. Notably, 60% of the indicated shared data purposes were advertising and 18.8% of purposes for collected data were indicated as advertising.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Austria
The most popular foreign apps in Austria for the last 12 months were: Disney+, Netflix and Prime Video. They interact with an average of 12.7 data types, sharing an average of 5.7 and collecting an average of 12.7.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by Netflix at 12 data types (12 collected and none shared) and Disney+ at 9 (9 collected, 4 shared).
Disney+ interacts with 3 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, email address. It collects: other info.
Netflix interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, other info, voice or sound recordings.
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
Disney+ collects and shares the following sensitive data points: approximate location Disney+ collects the following sensitive data points: email address, other info.
Netflix collects the following sensitive data points: approximate location, email address, other info.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Disney+ had a total of 32 purposes for collecting user data. Which means every collected data type has an average of 2.7 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1.3 uses per data type. Notably, 60% of the indicated shared data purposes were advertising and 18.8% of purposes for collected data were indicated as advertising.
Netflix had a total of 25 purposes for collecting user data. Which means every collected data type has an average of 2.1 uses for the developers of the app. When it comes to sharing, Netflix shares no data.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Belarus
The most popular foreign apps in Belarus for the last 12 months were: TikTok, Telegram and TikTok Lite. They interact with an average of 16.7 data types, sharing an average of 2 and collecting an average of 19.3.
TikTok Lite interacts with the most data types – 25 total (of which 25 are collected and 0 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and Telegram at 9 (9 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Telegram interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects: precise location, name, photos, videos, voice or sound recordings, files and docs, contacts.
TikTok Lite interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects: name, email address, address, phone number, other info, user payment info, other financial info, emails, photos, videos, voice or sound recordings, contacts, other user-generated content.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
TikTok Lite collects the following sensitive data points: email address, address, phone number.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 6.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Telegram had a total of 9 purposes for collecting user data. Which means every collected data type has an average of 1 use for the developers of the app. When it comes to sharing, Telegram shares no data.
TikTok Lite had a total of 77 purposes for collecting user data. Which means every collected data type has an average of 3.1 uses for the developers of the app. When it comes to sharing, TikTok Lite shares no data.
Belgium
The most popular foreign apps in Belgium for the last 12 months were: Prime Video, Disney+ and HBO Max. They interact with an average of 13.3 data types, sharing an average of 8.3 and collecting an average of 13.3.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by HBO Max at 14 data types (14 collected and 8 shared) and Disney+ at 9 (9 collected, 4 shared).
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
Disney+ interacts with 3 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, email address. It collects: other info.
HBO Max interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, name, email address, other info. It collects: installed apps.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Disney+ collects and shares the following sensitive data points: approximate location Disney+ collects the following sensitive data points: email address, other info.
HBO Max collects and shares the following sensitive data points: approximate location, name, email address, other info.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 6.8 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Disney+ had a total of 32 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1.3 uses per data type. Notably, 60% of the indicated shared data purposes were advertising and 18.8% of purposes for collected data were indicated as advertising.
HBO Max had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.2 uses for the developers of the app. When it comes to sharing, the developers have 40 purposes for users’ shared data, or 5 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 13.6% of purposes for collected data were indicated as advertising.
Bulgaria
The most popular foreign apps in Bulgaria for the last 12 months were: TikTok, Instagram and WhatsApp. They interact with an average of 25 data types, sharing an average of 3.7 and collecting an average of 25.
Instagram interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and WhatsApp at 14 (14 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Instagram interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
WhatsApp interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, user payment info, contacts, other user-generated content.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Instagram collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps
WhatsApp collects the following sensitive data points: approximate location.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 1.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Instagram had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
WhatsApp had a total of 42 purposes for collecting user data. Which means every collected data type has an average of 3 uses for the developers of the app. When it comes to sharing, WhatsApp shares no data.
Croatia
The most popular foreign apps in Croatia for the last 12 months were: TikTok, Threads and Netflix. They interact with an average of 23.7 data types, sharing an average of 3.7 and collecting an average of 24.3.
Threads interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and Netflix at 12 (12 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Threads interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
Netflix interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, other info, voice or sound recordings.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Threads collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
Netflix collects the following sensitive data points: approximate location, email address, other info.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 1.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Threads had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Netflix had a total of 25 purposes for collecting user data. Which means every collected data type has an average of 2.1 uses for the developers of the app. When it comes to sharing, Netflix shares no data.
Czech Republic
The most popular foreign apps in Czechia for the last 12 months were: TikTok, WhatsApp and ChatGPT. They interact with an average of 16 data types, sharing an average of 2.3 and collecting an average of 15.7.
TikTok interacts with the most data types – 24 total (of which 24 are collected and 6 are shared), followed by WhatsApp at 14 data types (14 collected and none shared) and ChatGPT at 10 (9 collected, 1 shared).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
WhatsApp interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, user payment info, contacts, other user-generated content.
ChatGPT interacts with 4 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, other user-generated content.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
WhatsApp collects the following sensitive data points: approximate location.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.2 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
WhatsApp had a total of 42 purposes for collecting user data. Which means every collected data type has an average of 3 uses for the developers of the app. When it comes to sharing, WhatsApp shares no data.
ChatGPT had a total of 23 purposes for collecting user data. Which means every collected data type has an average of 2.6 uses for the developers of the app. When it comes to sharing, the developers have 1 purposes for users’ shared data, or 1 use per data type. Notably, 0% of purposes for collected data were indicated as advertising.
Denmark
The most popular foreign apps in Denmark for the last 12 months were: Disney+, Pluto TV and Prime Video. They interact with an average of 10.3 data types, sharing an average of 8 and collecting an average of 11.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by Pluto TV at 10 data types (7 collected and 7 shared) and Disney+ at 9 (9 collected, 4 shared).
Disney+ interacts with 3 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, email address. It collects: other info.
Pluto TV interacts with 4 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, name, email address. It collects: other info.
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
Disney+ collects and shares the following sensitive data points: approximate location Disney+ collects the following sensitive data points: email address, other info.
Pluto TV collects and shares the following sensitive data points: approximate location.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Disney+ had a total of 32 purposes for collecting user data. Which means every collected data type has an average of 4.6 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1.3 uses per data type. Notably, 60% of the indicated shared data purposes were advertising and 18.8% of purposes for collected data were indicated as advertising.
Pluto TV had a total of 21 purposes for collecting user data. Which means every collected data type has an average of 3 uses for the developers of the app. When it comes to sharing, the developers have 14 purposes for users’ shared data, or 2 uses per data type. Notably, 14.3% of the indicated shared data purposes were advertising and 9.5% of purposes for collected data were indicated as advertising.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Estonia
The most popular foreign apps in Estonia for the last 12 months were: ChatGPT, TikTok and Telegram. They interact with an average of 17 data types, sharing an average of 2.3 and collecting an average of 14.
TikTok interacts with the most data types – 24 total (of which 24 are collected and 6 are shared), followed by ChatGPT at 10 data types (9 collected and 1 shared) and Telegram at 9 (9 collected).
ChatGPT interacts with 4 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, other user-generated content.
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Telegram interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects: precise location, name, photos, videos, voice or sound recordings, files and docs, contacts.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
ChatGPT had a total of 23 purposes for collecting user data. Which means every collected data type has an average of 1 use for the developers of the app. When it comes to sharing, the developers have 1 purpose for users’ shared data, or 1 use per data type.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 2.5 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Telegram had a total of 9 purposes for collecting user data. Which means every collected data type has an average of 1 use for the developers of the app. When it comes to sharing, Telegram shares no data.
Finland
The most popular foreign apps in Finland for the last 12 months were: Prime Video, SkyShowtime and Netflix. They interact with an average of 13.3 data types, sharing an average of 6.7 and collecting an average of 14.3.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by SkyShowtime at 14 data types (14 collected and 7 shared) and Netflix at 12 (12 collected).
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
SkyShowtime interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, name, email address, address. It collects: phone number, other info.
Netflix interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, other info, voice or sound recordings.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
SkyShowtime collects and shares the following sensitive data points: approximate location, name, email address, address SkyShowtime collects the following sensitive data points: phone number, other info.
Netflix collects the following sensitive data points: approximate location, email address, other info.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 4.4 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
SkyShowtime had a total of 55 purposes for collecting user data. Which means every collected data type has an average of 3.9 uses for the developers of the app. When it comes to sharing, the developers have 10 purposes for users’ shared data, or 1.4 uses per data type. Notably, 70% of the indicated shared data purposes were advertising and 20% of purposes for collected data were indicated as advertising.
Netflix had a total of 25 purposes for collecting user data. Which means every collected data type has an average of 2.1 uses for the developers of the app. When it comes to sharing, Netflix shares no data.
France
The most popular foreign apps in France for the last 12 months were: TikTok, Netflix and Instagram. They interact with an average of 16 data types, sharing an average of 3.7 and collecting an average of 24.3.
Instagram interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and Netflix at 12 (12 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Netflix interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, other info, voice or sound recordings.
Instagram interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Netflix collects the following sensitive data points: approximate location, email address, other info.
Instagram collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.9 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Netflix had a total of 25 purposes for collecting user data. Which means every collected data type has an average of 2.1 uses for the developers of the app. When it comes to sharing, Netflix shares no data.
Instagram had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Germany
The most popular foreign apps in Germany for the last 12 months were: TikTok, Instagram and Telegram. They interact with an average of 32.7 data types, sharing an average of 3.7 and collecting an average of 23.3.
Instagram interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and Telegram at 9 (9 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Instagram interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
Telegram interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects: precise location, name, photos, videos, voice or sound recordings, files and docs, contacts.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Instagram collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 1.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Instagram had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Telegram had a total of 9 purposes for collecting user data. Which means every collected data type has an average of 1 use for the developers of the app. When it comes to sharing, Telegram shares no data.
Greece
The most popular foreign apps in Greece for the last 12 months were: TikTok, Threads and Viber. They interact with an average of 28.3 data types, sharing an average of 6 and collecting an average of 28.3.
Threads interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and Viber at 24 (24 collected, 7 shared).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Threads interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
Viber interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number, political or religious beliefs, sexual orientation, other info, photos, contacts, other user-generated content.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Threads collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
Viber collects and shares the following sensitive data points: approximate location, email address Viber collects the following sensitive data points: name, other info.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 1.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Threads had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Viber had a total of 65 purposes for collecting user data. Which means every collected data type has an average of 2.7 uses for the developers of the app. When it comes to sharing, the developers have 12 purposes for users’ shared data, or 1.7 uses per data type. Notably, 25% of the indicated shared data purposes were advertising and 10.8% of purposes for collected data were indicated as advertising.
Hungary
The most popular foreign apps in Hungary for the last 12 months were: TikTok, Messenger and Threads. They interact with an average of 32.7 data types, sharing an average of 5.3 and collecting an average of 32.7.
Threads interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by Messenger at 37 data types (37 collected and 5 shared) and TikTok at 24 (24 collected, 6 shared).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Messenger interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
Threads interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Messenger collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
Threads collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 1.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Messenger had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Threads had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Ireland
The most popular foreign apps in Ireland for the last 12 months were: Netflix, Prime Video and Disney+. They interact with an average of 22 data types, sharing an average of 5.7 and collecting an average of 12.7.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by Netflix at 12 data types (12 collected and none shared) and Disney+ at 9 (9 collected, 4 shared).
Netflix interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, other info, voice or sound recordings.
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
Disney+ interacts with 3 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, email address. It collects: other info.
Netflix collects the following sensitive data points: approximate location, email address, other info.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Disney+ collects and shares the following sensitive data points: approximate location Disney+ collects the following sensitive data points: email address, other info.
Netflix had a total of 25 purposes for collecting user data. Which means every collected data type has an average of 1.5 uses for the developers of the app. When it comes to sharing, Netflix shares no data.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Disney+ had a total of 32 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1.3 uses per data type. Notably, 60% of the indicated shared data purposes were advertising and 18.8% of purposes for collected data were indicated as advertising.
Italy
The most popular foreign apps in Italy for the last 12 months were: TikTok, Prime Video and Threads. They interact with an average of 16.7 data types, sharing an average of 8 and collecting an average of 26.
Threads interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and Prime Video at 17 (17 collected, 13 shared).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
Threads interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Threads collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 3.5 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Threads had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Latvia
The most popular foreign apps in Latvia for the last 12 months were: TikTok, Telegram and ChatGPT. They interact with an average of 23.3 data types, sharing an average of 2.3 and collecting an average of 14.
TikTok interacts with the most data types – 24 total (of which 24 are collected and 6 are shared), followed by ChatGPT at 10 data types (9 collected and 1 shared) and Telegram at 9 (9 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Telegram interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects: precise location, name, photos, videos, voice or sound recordings, files and docs, contacts.
ChatGPT interacts with 4 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, other user-generated content.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 6.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Telegram had a total of 9 purposes for collecting user data. Which means every collected data type has an average of 1 use for the developers of the app. When it comes to sharing, Telegram shares no data.
ChatGPT had a total of 23 purposes for collecting user data. Which means every collected data type has an average of 2.6 uses for the developers of the app. When it comes to sharing, the developers have 1 purposes for users’ shared data, or 1 use per data type. Notably, 0% of purposes for collected data were indicated as advertising.
Lithuania
The most popular foreign apps in Lithuania for the last 12 months were: TikTok, ChatGPT and Threads. They interact with an average of 16 data types, sharing an average of 4 and collecting an average of 23.3.
Threads interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and ChatGPT at 10 (9 collected, 1 shared).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
ChatGPT interacts with 4 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, other user-generated content.
Threads interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Threads collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 6.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
ChatGPT had a total of 23 purposes for collecting user data. Which means every collected data type has an average of 2.6 uses for the developers of the app. When it comes to sharing, the developers have 1 purposes for users’ shared data, or 1 use per data type. Notably, 0% of purposes for collected data were indicated as advertising.
Threads had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Netherlands
The most popular foreign apps in the Netherlands for the last 12 months were: Netflix, Prime Video and HBO Max. They interact with an average of 22 data types, sharing an average of 7 and collecting an average of 14.3.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by HBO Max at 14 data types (14 collected and 8 shared) and Netflix at 12 (12 collected).
Netflix interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, other info, voice or sound recordings.
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
HBO Max interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, name, email address, other info. It collects: installed apps.
Netflix collects the following sensitive data points: approximate location, email address, other info.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
HBO Max collects and shares the following sensitive data points: approximate location, name, email address, other info.
Netflix had a total of 25 purposes for collecting user data. Which means every collected data type has an average of 1.5 uses for the developers of the app. When it comes to sharing, Netflix shares no data.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
HBO Max had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.2 uses for the developers of the app. When it comes to sharing, the developers have 40 purposes for users’ shared data, or 5 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 13.6% of purposes for collected data were indicated as advertising.
Norway
The most popular foreign apps in Norway for the last 12 months were: Prime Video, SkyShowtime and Disney+. They interact with an average of 15 data types, sharing an average of 8 and collecting an average of 13.3.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by SkyShowtime at 14 data types (14 collected and 7 shared) and Disney+ at 9 (9 collected, 4 shared).
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
SkyShowtime interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, name, email address, address. It collects: phone number, other info.
Disney+ interacts with 3 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, email address. It collects: other info.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
SkyShowtime collects and shares the following sensitive data points: approximate location, name, email address, address SkyShowtime collects the following sensitive data points: phone number, other info.
Disney+ collects and shares the following sensitive data points: approximate location Disney+ collects the following sensitive data points: email address, other info.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 4.4 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
SkyShowtime had a total of 55 purposes for collecting user data. Which means every collected data type has an average of 3.9 uses for the developers of the app. When it comes to sharing, the developers have 10 purposes for users’ shared data, or 1.4 uses per data type. Notably, 70% of the indicated shared data purposes were advertising and 20% of purposes for collected data were indicated as advertising.
Disney+ had a total of 32 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1.3 uses per data type. Notably, 60% of the indicated shared data purposes were advertising and 18.8% of purposes for collected data were indicated as advertising.
Poland
The most popular foreign apps in Poland for the last 12 months were: TikTok, WhatsApp and Temu. They interact with an average of 15.7 data types, sharing an average of 2.3 and collecting an average of 18.7.
TikTok interacts with the most data types – 24 total (of which 24 are collected and 6 are shared), followed by Temu at 18 data types (18 collected and 1 shared) and WhatsApp at 14 (14 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
WhatsApp interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, user payment info, contacts, other user-generated content.
Temu interacts with 10 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, address, phone number, user payment info, photos, videos, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
WhatsApp collects the following sensitive data points: approximate location.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.2 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
WhatsApp had a total of 42 purposes for collecting user data. Which means every collected data type has an average of 3 uses for the developers of the app. When it comes to sharing, WhatsApp shares no data.
Temu had a total of 21 purposes for collecting user data. Which means every collected data type has an average of 1.2 uses for the developers of the app. When it comes to sharing, the developers have 1 purposes for users’ shared data, or 1 use per data type. Notably, 100% of the indicated shared data purposes were advertising and 0% of purposes for collected data were indicated as advertising.
Portugal
The most popular foreign apps in Portugal for the last 12 months were: Threads, TikTok and Prime Video. They interact with an average of 26.3 data types, sharing an average of 8 and collecting an average of 26.
Threads interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and Prime Video at 17 (17 collected, 13 shared).
Threads interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
Threads collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Threads had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 9.3 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 2.5 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Romania
The most popular foreign apps in Romania for the last 12 months were: TikTok, WhatsApp and Instagram. They interact with an average of 18.3 data types, sharing an average of 3.7 and collecting an average of 25.
Instagram interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and WhatsApp at 14 (14 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
WhatsApp interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, user payment info, contacts, other user-generated content.
Instagram interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
WhatsApp collects the following sensitive data points: approximate location.
Instagram collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.2 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
WhatsApp had a total of 42 purposes for collecting user data. Which means every collected data type has an average of 3 uses for the developers of the app. When it comes to sharing, WhatsApp shares no data.
Instagram had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 6.1 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
Slovakia
The most popular foreign apps in Slovakia for the last 12 months were: TikTok, WhatsApp and Temu. They interact with an average of 18.7 data types, sharing an average of 2.3 and collecting an average of 18.7.
TikTok interacts with the most data types – 24 total (of which 24 are collected and 6 are shared), followed by Temu at 18 data types (18 collected and 1 shared) and WhatsApp at 14 (14 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
WhatsApp interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, user payment info, contacts, other user-generated content.
Temu interacts with 10 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, address, phone number, user payment info, photos, videos, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
WhatsApp collects the following sensitive data points: approximate location.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.2 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
WhatsApp had a total of 42 purposes for collecting user data. Which means every collected data type has an average of 3 uses for the developers of the app. When it comes to sharing, WhatsApp shares no data.
Temu had a total of 21 purposes for collecting user data. Which means every collected data type has an average of 1.2 uses for the developers of the app. When it comes to sharing, the developers have 1 purposes for users’ shared data, or 1 use per data type. Notably, 100% of the indicated shared data purposes were advertising and 0% of purposes for collected data were indicated as advertising.
Slovenia
The most popular foreign apps in Slovenia for the last 12 months were: ChatGPT, TikTok and WhatsApp. They interact with an average of 17.3 data types, sharing an average of 2.3 and collecting an average of 15.7.
TikTok interacts with the most data types – 24 total (of which 24 are collected and 6 are shared), followed by WhatsApp at 14 data types (14 collected and none shared) and ChatGPT at 10 (9 collected, 1 shared).
ChatGPT interacts with 4 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, other user-generated content.
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
WhatsApp interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, user payment info, contacts, other user-generated content.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
WhatsApp collects the following sensitive data points: approximate location.
ChatGPT had a total of 23 purposes for collecting user data. Which means every collected data type has an average of 1 use for the developers of the app. When it comes to sharing, the developers have 1 purposes for users’ shared data, or 1 use per data type. Notably, 0% of purposes for collected data were indicated as advertising.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 2.5 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
WhatsApp had a total of 42 purposes for collecting user data. Which means every collected data type has an average of 3 uses for the developers of the app. When it comes to sharing, WhatsApp shares no data.
Spain
The most popular foreign apps in Spain for the last 12 months were: TikTok, HBO Max and Prime Video. They interact with an average of 17.3 data types, sharing an average of 9 and collecting an average of 18.3.
TikTok interacts with the most data types – 24 total (of which 24 are collected and 6 are shared), followed by Prime Video at 17 data types (17 collected and 13 shared) and HBO Max at 14 (14 collected, 8 shared).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
HBO Max interacts with 5 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, name, email address, other info. It collects: installed apps.
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
HBO Max collects and shares the following sensitive data points: approximate location, name, email address, other info.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.2 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
HBO Max had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 4.2 uses for the developers of the app. When it comes to sharing, the developers have 40 purposes for users’ shared data, or 5 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 13.6% of purposes for collected data were indicated as advertising.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Sweden
The most popular foreign apps in Sweden for the last 12 months were: Prime Video, Disney+ and SkyShowtime. They interact with an average of 14.3 data types, sharing an average of 8 and collecting an average of 13.3.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by SkyShowtime at 14 data types (14 collected and 7 shared) and Disney+ at 9 (9 collected, 4 shared).
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
Disney+ interacts with 3 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, email address. It collects: other info.
SkyShowtime interacts with 6 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, name, email address, address. It collects: phone number, other info.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Disney+ collects and shares the following sensitive data points: approximate location Disney+ collects the following sensitive data points: email address, other info.
SkyShowtime collects and shares the following sensitive data points: approximate location, name, email address, address SkyShowtime collects the following sensitive data points: phone number, other info.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 6.8 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
Disney+ had a total of 32 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1.3 uses per data type. Notably, 60% of the indicated shared data purposes were advertising and 18.8% of purposes for collected data were indicated as advertising.
SkyShowtime had a total of 55 purposes for collecting user data. Which means every collected data type has an average of 3.9 uses for the developers of the app. When it comes to sharing, the developers have 10 purposes for users’ shared data, or 1.4 uses per data type. Notably, 70% of the indicated shared data purposes were advertising and 20% of purposes for collected data were indicated as advertising.
Switzerland
The most popular foreign apps in Switzerland for the last 12 months were: Prime Video, ChatGPT and Disney+. They interact with an average of 13.7 data types, sharing an average of 6 and collecting an average of 11.7.
Prime Video interacts with the most data types – 17 total (of which 17 are collected and 13 are shared), followed by ChatGPT at 10 data types (9 collected and 1 shared) and Disney+ at 9 (9 collected, 4 shared).
Prime Video interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, precise location, name, email address, user payment info. It collects: address, phone number.
ChatGPT interacts with 4 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, other user-generated content.
Disney+ interacts with 3 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: approximate location, email address. It collects: other info.
Prime Video collects the following sensitive data points: approximate location, precise location, name, email address, phone number.
Disney+ collects and shares the following sensitive data points: approximate location Disney+ collects the following sensitive data points: email address, other info.
Prime Video had a total of 61 purposes for collecting user data. Which means every collected data type has an average of 6.8 uses for the developers of the app. When it comes to sharing, the developers have 25 purposes for users’ shared data, or 1.9 uses per data type. Notably, 20% of the indicated shared data purposes were advertising and 16.4% of purposes for collected data were indicated as advertising.
ChatGPT had a total of 23 purposes for collecting user data. Which means every collected data type has an average of 2.6 uses for the developers of the app. When it comes to sharing, the developers have 1 purposes for users’ shared data, or 1 use per data type. Notably, 0% of purposes for collected data were indicated as advertising.
Disney+ had a total of 32 purposes for collecting user data. Which means every collected data type has an average of 3.6 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1.3 uses per data type. Notably, 60% of the indicated shared data purposes were advertising and 18.8% of purposes for collected data were indicated as advertising.
Turkey
The most popular foreign apps in Turkey for the last 12 months were: Instagram, TikTok and CapCut. They interact with an average of 23.3 data types, sharing an average of 3.7 and collecting an average of 25.3.
Instagram interacts with the most data types – 37 total (of which 37 are collected and 5 are shared), followed by TikTok at 24 data types (24 collected and 6 shared) and CapCut at 15 (15 collected).
Instagram interacts with 24 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, email address, phone number. It collects: approximate location, precise location, address, political or religious beliefs, sexual orientation, other info, credit score, user payment info, other financial info, health info, fitness info, emails, sms or mms, photos, videos, voice or sound recordings, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
CapCut interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, email address, phone number, photos, videos, voice or sound recordings, other user-generated content.
Instagram collects the following sensitive data points: approximate location, precise location, name, email address, address, phone number, other info, other financial info, photos, videos, files and docs, calendar events, contacts, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
Instagram had a total of 224 purposes for collecting user data. Which means every collected data type has an average of 9.3 uses for the developers of the app. When it comes to sharing, the developers have 5 purposes for users’ shared data, or 1 use per data type. Notably, 20% of the indicated shared data purposes were advertising and 11.6% of purposes for collected data were indicated as advertising.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 2.5 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
CapCut had a total of 21 purposes for collecting user data. Which means every collected data type has an average of 1.4 uses for the developers of the app. When it comes to sharing, CapCut shares no data.
Ukraine
The most popular foreign apps in Ukraine for the last 12 months were: TikTok, Telegram and Temu. They interact with an average of 16 data types, sharing an average of 2.3 and collecting an average of 17.
TikTok interacts with the most data types – 24 total (of which 24 are collected and 6 are shared), followed by Temu at 18 data types (18 collected and 1 shared) and Telegram at 9 (9 collected).
TikTok interacts with 13 data types deemed sensitive by Incogni’s privacy experts. It collects and shares: name, photos, videos, voice or sound recordings, other user-generated content. It collects: approximate location, email address, address, phone number, other info, user payment info, other financial info, contacts.
Telegram interacts with 7 data types deemed sensitive by Incogni’s privacy experts. It collects: precise location, name, photos, videos, voice or sound recordings, files and docs, contacts.
Temu interacts with 10 data types deemed sensitive by Incogni’s privacy experts. It collects: approximate location, name, email address, address, phone number, user payment info, photos, videos, other user-generated content, installed apps.
TikTok collects the following sensitive data points: approximate location, email address, phone number, other info, contacts, other user-generated content.
TikTok had a total of 59 purposes for collecting user data. Which means every collected data type has an average of 6.6 uses for the developers of the app. When it comes to sharing, the developers have 6 purposes for users’ shared data, or 1 use per data type. Notably, 22% of purposes for collected data were indicated as advertising.
Telegram had a total of 9 purposes for collecting user data. Which means every collected data type has an average of 1 use for the developers of the app. When it comes to sharing, Telegram shares no data.
Temu had a total of 21 purposes for collecting user data. Which means every collected data type has an average of 1.2 uses for the developers of the app. When it comes to sharing, the developers have 1 purposes for users’ shared data, or 1 use per data type. Notably, 100% of the indicated shared data purposes were advertising and 0% of purposes for collected data were indicated as advertising.
Conclusion
This research demonstrates that foreign-owned applications (predominantly from the duopoly of US-China technologies) represent an ongoing privacy risk for Europeans’ personal data. While GDPR represents a world-leading stance in data protection, foreign-owned applications can easily operate in gray areas that leave EU citizens’ personal data wide open to third-party access. Importantly, none of the Chinese companies mentioned in this study has provided legal information about data transfers abroad. Limiting European’s data exposure to foreign entities at the application level will be a challenge; especially as these applications explode in popularity among younger generations of Europeans.
Methodology
Top app rankings were based on data from AppTweak, collected on July 15th. Incogni’s researchers then identified the headquarters of the most popular apps in each country and derived a top 3 list for each country, only including apps made in other countries.
On July 17th, 2025, the research team collected information about their selected apps from the Google Play store, noting what user information the selected apps’ developers claimed to collect and share as well as the purposes given.
For detailed information used in this study, see our public dataset.
Visuals
Notwithstanding the terms of the CC BY-NC-SA 3.0 licenses of the visuals above, we grant news organizations and other media entities permission to use the specified asset(s) in their news coverage or commentary, including on pages that display advertising.
The charts, graphs, and tables used in this research can seamlessly be embedded into your website. Use the menu that appears at the top right of the visual when you hover over it with your mouse. When embedded, these visuals maintain their interactivity and preserve their original quality.
