Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 132a9a96 authored by Romain Hunault's avatar Romain Hunault 🚴🏻
Browse files

feat(app-lounge): add privacy score

parent 8dc3f514
Loading
Loading
Loading
Loading
+12 −5
Original line number Diff line number Diff line
@@ -12,12 +12,19 @@ App Lounge checks app integrity with PGP signatures or checksums, and suspicious

## Privacy score

Every app detail page shows a Privacy Score derived from Exodus Privacy:  
**Privacy Score = Trackers score + Permissions score**  
- Trackers score = `0` if the tracker count exceeds five, otherwise `9 − trackers`.  
- Permissions score = `0` when permissions exceed nine, otherwise `0.2 × ((10 − permissions) / 2)`.
Every application detail page highlights a Privacy Score so you can compare potential data leakage before installing. The score combines two clear criteria:

The score helps you compare privacy impacts at a glance. You can read more about the algorithm on GitLab and across the documentation, but the core idea is a transparent blend of permissions and tracker visibility.
- **Trackers** – third-party libraries that monitor usage, location, or behaviour (data pulled from [Exodus Privacy](https://reports.exodus-privacy.eu.org/en/reports/list/)).
- **Permissions** – what the app can do on your device (contacts, SMS, camera, etc.).

The numeric score runs from 0 to 10 and is color-coded from red to green. Trackers dominate the rating: avoid apps with more than five trackers (tracking score = 0); otherwise the score is `9 − trackers`. Permissions contribute the final points (0 if the app needs more than five permissions). 

**Privacy Score = Trackers score + Permissions score.**  
Scores and telemetry are logged in the App Lounge backend (`PrivacyInfoViewModel.kt`) so we can improve the calculation over time. Apps flagged with a poor privacy policy (rating E from [tosdr.org](https://tosdr.org)) receive a score of zero regardless of trackers or permissions.

> Tip: Exodus Privacy does not operate the privacy score algorithm—App Lounge adapts their data to create a simple, transparent rating for /e/OS.

The privacy score is a helpful signal but not an exhaustive judgment; apps without trackers might still misuse legitimate permissions, so always consider the publisher and usage context before installing.

## Features available to every user

+0 −59
Original line number Diff line number Diff line
In `App Lounge`, the default /e/OS application repository, anyone can vet their favorite apps for privacy. Trackers embedded in apps and permissions are highlighted for all to see and make informed choices.

## What are trackers and permissions?

`Trackers` are pieces of software embedded in apps meant to collect data about what you do with the app, where you use it or target you with customized ads.

`Permissions` are actions that can be performed by the app on the phone, for example accessing contacts and SMS or using certain features like the camera or the Internet.

To help everyone judge the safety of an application regarding data leakage and application access before installing it on their phone, each app in App Lounge gets a privacy score.

Scoring is based on 2 criteria:

  - Trackers embedded in the application
  -	Permissions required by the application

## The calculation algorithm

The score is a rating out of 10 combined with a colour code from red to green. The higher the numeric value, the safer the application is for the user.
As mentioned above the amount of permissions and trackers found in an application combine to form the application’s privacy score:

{% include alerts/tip.html content="Privacy score = value derived from Trackers + value derived from Permissions" %}


- the number of trackers makes the main part of the scoring. It is based on [reports computed by Exodus Privacy](https://reports.exodus-privacy.eu.org/en/reports/list/) we access via an API.

- the number of permissions makes up the remaining part of the scoring. It is also based on [reports computed by Exodus Privacy](https://reports.exodus-privacy.eu.org/en/reports/list/).

### Value as derived from Trackers.
  -	0 trackers : tracking score = 9
  -	1 tracker : tracking score = 8
  -	2 trackers : tracking score = 7
  -	3 trackers : tracking score = 6
  -	4 trackers : tracking score = 5
  -	5 trackers : tracking score = 4
  -	6 or more trackers : tracking score = 0


### Value as derived from the Permissions
  - 1 Point : one to five permissions
  -	0 points : more than five permissions

The source code of the Privacy Score’s computing algorithm is available [here](https://gitlab.e.foundation/e/os/apps/-/blob/main/app/src/main/java/foundation/e/apps/PrivacyInfoViewModel.kt#L78).
The logic for calculating the Privacy Score will be improved further based on feedback and after observing it in practice.

### Privacy policy
Privacy policy of an app is a very important aspect to be aware of. Unfortunately, we can't vet the privacy policies of all apps in existence, but we have taken the effort to shortlist a few apps with bad privacy policies (rated E by [tosdr.org](https://tosdr.org)). These apps are given a score of 0 (zero), regardless of the number of embedded trackers or the permissions requested by the app.

## The Privacy Score’s limits

The Privacy Score is an help provided to App Lounge’s users but it has its limits. For instance:
 -	If an application does not use any trackers but has other ways to collect its user’s data it can have a good even excellent Privacy Score whereas the user’s privacy is not observed.
 -	It cannot say if the permissions requested by the application are legitimate.


## Feedback and Suggestions
We welcome suggestions and feedback to improve /e/OS Operating System. You can log improvement issues [in GitLab](https://gitlab.e.foundation/e/backlog/-/issues) or send your comments to {% translate content.contact_helpdesk %}


{% include alerts/tip.html content="Exodus Privacy is not responsible for our privacy score calculation." %}