🌐 Web App vs Native App
| Last review date | Platforms researched |
|---|---|
| 2026-02-26 | Android 16, iOS 26, Chrome 133, Safari 18, Firefox 135 |
When you install a native app instead of using the equivalent web app in a browser, you often grant access to significantly more personal data.
No Data Collected
This demo runs entirely in your browser. No data is collected, stored, or sent to any server.
Collecting browser data...
Why this matters
| Scenario | Web app | Native app |
|---|---|---|
| Shopping | Tracks what you browse on that site | Additionally collects location, advertising ID, installed apps for retargeting |
| Social media | Browser cookie partitioning + tracker blocking | Reads contacts, background location, clipboard |
| Banking | Limited hardware access | Biometrics, secure enclave, push alerts — native access improves security here |
Recommendations
When to prefer the web app
- Shopping, news, social media, food ordering, forums
- Any service you use infrequently
- When using a privacy-focused browser (e.g. Firefox)
When a native app is reasonable
- Banking and financial apps (secure enclave, biometrics)
- Navigation apps that need real-time background GPS
- Messaging apps with end-to-end encryption (Signal, etc.)
If you must use a native app
- Review permissions — deny anything not essential to the app's function
- Set location to "While Using" — never "Always" unless truly needed
- Disable background app refresh for apps that don't need it
- Reset advertising ID regularly (or disable it entirely)
- Revoke unused permissions — audit quarterly
- Use open-source alternatives — e.g. F-Droid (Android)
- Use a work profile (Android) — apps like Shelter or Insular create an isolated work profile, separating apps and their data from your personal profile
Reference
| Resource | Description |
|---|---|
| Permissions on Android | Android developer documentation on the permission model |
| App Privacy Details on the App Store | Apple's requirements for privacy nutrition labels |
| Web API Permissions | MDN documentation on the browser Permissions API |
| Shelter | Open-source Android work profile manager |
| Insular | Open-source Android app isolation via managed profiles |
Related tools
- Browser Fingerprint — see exactly what data websites collect about you without cookies
- Browser Permission Check — trigger real browser permission prompts and see what data they unlock