See the hidden trackers in your apps.

Powered by Lockdown

Trackers? All Reviews


Food, Delivery & Services

#4 in Food & Drink

iOS Review


Data collection about user preferences in businesses and service providers is likely part of Yelp's business, and we were disappointed that Apple's much-touted App Tracking Transparency failed to block any of these trackers. We detected 5 third-party trackers in the Yelp app, and 39 attempted tracking connections detected initially. It is safe to assume that most users wouldn't want 5 different organizations tracking them, especially when our review explicitly requested Yelp to "Do Not Track". No should mean no, and because Yelp ignores this (and is a large company with adequate resources to properly address user privacy if they wanted to), we give it a D.

Yelp's Privacy Rating is D. We found 5 different third-party trackers in the Yelp app, and there were 39 attempted tracking connections detected during our test.

Testing Results

Blocked tracking attempts.

How was tracker testing done?

Tested using Lockdown v1.2.4.

What was done during the test?

39 total tracking attempts in a few minutes of initial activity: including app download, new user sign-up, and normal user onboarding activities.

How many tracking attempts each time the app is opened?

43 new tracking attempts upon app force-quit and re-open. It was unusual that upon app re-open, there were actually more tracking attempts than during the initial set-up.

Did user give consent to tracking before tracking started?


Personal Data Collected
📍 Location
❗️ Notification
✉️ Email Address
🙋‍♀️ Full Name
📅 Full Birthdate
👤 Gender
🖼 Photos
📷 Camera
🤦‍♀️ Facebook Connect
Trackers Found
Facebook Pixel



Measure Ad Performance

Privacy Policy: Anything present in HTTP headers - IP addresses, information about the web browser, page location, document, referrer and person using the website, Pixel ID and the Facebook Cookie, any buttons clicked by site visitors, the labels of those buttons and any pages visited as a result of the button clicks, Developers and marketers can optionally choose to send additional information, website field names like ‘email’, ‘address’, ‘quantity’ for when you purchase a product or service



Mobile measurement, linking platform

Privacy Policy: IP Address, Cookie, Link Data, User Agent, Referrer, Request, Phone Number, Engagement Data, iOS Identifier for Advertising, iOS Identifier for Vendors, Android Advertising ID, Android ID, Branch Cookie ID, App Version, Device model, Manufacturer, Operating system, Operating system version, Screen size, screen resolution, Session start/stop time, Mobile network status (WiFi, etc), Application installed time, Application updated time, Device locale (country and language), Local IP address, Mobile platform, Branch SDK version, Carrier ID, MAC address, Windows Advertising ID, CPU ID



Stability Monitoring Solution

Privacy Policy: The Bugsnag Services monitor errors in web, mobile and server applications and programs under the direction of its Customers, to provide session, error and crash Event Data. Each Bugsnag Customer provides Bugsnag with session, error and crash Event Data from the Customer’s applications and programs. Event Data may contain personal information of the Customer’s end user. This means that if you are an end user of a service provided by a Bugsnag Customer, then Bugsnag may receive Personal Information about you from the Bugsnag Customer. Customer may direct Bugsnag to log certain software application’s end user information associated with Event Data, such as the end user’s device ID, email and name.



Mobile Marketing Automation

Privacy Policy: Commercial Information. Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. Identifiers. Real name, alias, postal address, unique personal identifier, customer number, email address, account name, social security number, driver’s license number, passport number or other similar identifiers. Inferences. The derivation of information, data, assumptions, or conclusions from any other category of Personal Information to create a profile about a person reflecting the person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities and aptitudes. Internet or Network Information. Browsing history, search history, and information regarding a person’s interaction with an Internet website, application, or advertisement. Online Identifiers. An online identifier or other persistent identifier that can be used to recognize a person, family or device, over time and across different services, including but not limited to, a device identifier; an Internet Protocol (IP) address; cookies, beacons, pixel tags, mobile ad identifiers, or similar technology; customer number, unique pseudonym, or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers (i.e., the identification of a person or a device to a degree of certainty of more probable than not) that can be used to identify a particular person or device. Professional or Employment Information. This term is not defined in the CCPA, but likely includes any information relating to a person's current, past or prospective employment or professional experience (e.g., job history, performance evaluations).



Market Research

Privacy Policy: online identifiers (e.g., cookie identifiers, other hardware or device identifiers, and IP addresses), and Internet or other electronic network activity including information about your browsing history, operating system, browser type, website preferences, your use of website or application (e.g., time accessed, duration of visit, etc.).

Please share this review if you found it useful!