How privacytools.io Evaluates and Rates Privacy Tools
Updated
privacytools.io rates tools through a combination of editorial star scores (shown out of five, with a numeric average such as 4.7), short written descriptions that emphasize verifiable security properties, and category-based curation. Two signals matter most when reading the site: some listings are explicitly labeled "Ad" (sponsored placement), and the site presents itself as a curated guide "trusted since 2015" rather than a lab that publishes test methodology. So the ratings are best treated as editorial shortlists to investigate, not as independent benchmark results.
What the ratings actually contain
On the page, each Editor's Top Pick carries a five-star display plus a decimal score, a one-line category label, and a short description. For example:
| Tool | Category | Score | What the description emphasizes |
|---|---|---|---|
| LibreWolf | Browsers | 4.7 | Firefox-based hardening against tracking and fingerprinting, plus security improvements |
| PrivacyNotes | Notebooks | 4.8 | End-to-end encrypted notes/files/passwords, no email or password signup, open source |
| ProtonMail | 4.5 | End-to-end and zero-access encryption, anti-phishing, anti-spam, 2FA (marked "Ad") | |
| Surfshark | VPN | 3.5 | Netherlands jurisdiction, RAM-only servers, Cure53 audit (marked "Ad") |
| Bitwarden | Password Managers | 4.7 | Easy import from other managers, free for personal use, broad platform support |
| NextDNS | Ad Blocking | 4.7 | Configurable filtering, parental controls, category blocking (marked "Ad") |
| Organic Maps | Maps | 4.0 | Offline OpenStreetMap-based maps for Android and iOS |
The scores are not explained with a published rubric, so the decimal precision (4.7 vs. 4.8) should not be read as a measured difference in security.
The evaluation criteria visible in the descriptions
Across the listings, the same handful of properties recur. These are the factors the site appears to weigh:
- Encryption: end-to-end or zero-access encryption is called out for email and notes tools.
- Open source: stated for LibreWolf and PrivacyNotes, and implied as a plus elsewhere.
- Independent audits: Surfshark's Cure53 audit is named specifically.
- Jurisdiction: Surfshark's Netherlands base and the separate "European Alternatives" section both treat legal jurisdiction as a selection factor ("privacy tools that answer to European law, not a US subpoena").
- Operational details: RAM-only servers, no-email signup, free-for-personal-use tiers, and platform coverage.
A practical reading: treat each description as a checklist of claims to verify on the vendor's own site — confirm the audit report exists, confirm the open-source repository is active, and confirm the jurisdiction claim.
Sponsored placements and how to spot them
Several top picks are marked "Ad" (ProtonMail, Surfshark, NextDNS in the excerpt above). The label sits inside the listing, so a sponsored tool can still appear in the Editor's Top Picks grid alongside unsponsored ones. When comparing, filter first by whether a listing is labeled "Ad," then compare the remaining editorial picks on the criteria above. A sponsored listing is not automatically a poor choice — Surfshark's audit and jurisdiction claims are checkable — but the placement itself is not evidence of quality.
How the site organizes recommendations
Beyond the top picks, the site structures guidance in three ways that affect how ratings should be used:
- Replace-one-app flow: "Pick the apps you use today, we'll show you private alternatives that actually work," with entry points for Chrome, Gmail, WhatsApp, Google Drive, and others. This is a migration aid, not a ranking.
- European Alternatives: a jurisdiction-first shortlist (Mullvad Browser, NordPass, StartMail, Mojeek, Surfshark, Internxt, SimpleX Chat, "+117 more"), where the selection criterion is European legal exposure rather than a star score.
- Category browsing: an "All categories" index, so a tool's score only means something relative to others in its own category.
A workable way to use the ratings
For a decision you can defend, use the site as a starting shortlist and then verify:
- Check the label: note whether your candidate is marked "Ad."
- Match the category: compare scores only within the same category (a 4.0 in Maps is not comparable to a 4.7 in Browsers).
- Verify the headline claim: find the audit report, the source repository, or the jurisdiction statement on the vendor's site.
- Check the pricing signal: the site references subscriptions and free tiers in descriptions (e.g., Bitwarden "free for personal use," ProtonMail "free and paid plans"), but the page does not publish prices — confirm current terms with the vendor.
The site's own positioning — "the most reliable website for privacy tools since 2015" — is a longevity claim, not a testing methodology. Its value is in curated discovery and consistent criteria; the final judgment on any tool still rests on the primary evidence its descriptions point to.