How privacytools.io Evaluates and Rates Privacy Tools

Updated

privacytools.io rates tools through a combination of editorial star scores (shown out of five, with a numeric average such as 4.7), short written descriptions that emphasize verifiable security properties, and category-based curation. Two signals matter most when reading the site: some listings are explicitly labeled "Ad" (sponsored placement), and the site presents itself as a curated guide "trusted since 2015" rather than a lab that publishes test methodology. So the ratings are best treated as editorial shortlists to investigate, not as independent benchmark results.

What the ratings actually contain

On the page, each Editor's Top Pick carries a five-star display plus a decimal score, a one-line category label, and a short description. For example:

Tool Category Score What the description emphasizes
LibreWolf Browsers 4.7 Firefox-based hardening against tracking and fingerprinting, plus security improvements
PrivacyNotes Notebooks 4.8 End-to-end encrypted notes/files/passwords, no email or password signup, open source
ProtonMail Email 4.5 End-to-end and zero-access encryption, anti-phishing, anti-spam, 2FA (marked "Ad")
Surfshark VPN 3.5 Netherlands jurisdiction, RAM-only servers, Cure53 audit (marked "Ad")
Bitwarden Password Managers 4.7 Easy import from other managers, free for personal use, broad platform support
NextDNS Ad Blocking 4.7 Configurable filtering, parental controls, category blocking (marked "Ad")
Organic Maps Maps 4.0 Offline OpenStreetMap-based maps for Android and iOS

The scores are not explained with a published rubric, so the decimal precision (4.7 vs. 4.8) should not be read as a measured difference in security.

The evaluation criteria visible in the descriptions

Across the listings, the same handful of properties recur. These are the factors the site appears to weigh:

  • Encryption: end-to-end or zero-access encryption is called out for email and notes tools.
  • Open source: stated for LibreWolf and PrivacyNotes, and implied as a plus elsewhere.
  • Independent audits: Surfshark's Cure53 audit is named specifically.
  • Jurisdiction: Surfshark's Netherlands base and the separate "European Alternatives" section both treat legal jurisdiction as a selection factor ("privacy tools that answer to European law, not a US subpoena").
  • Operational details: RAM-only servers, no-email signup, free-for-personal-use tiers, and platform coverage.

A practical reading: treat each description as a checklist of claims to verify on the vendor's own site — confirm the audit report exists, confirm the open-source repository is active, and confirm the jurisdiction claim.

Sponsored placements and how to spot them

Several top picks are marked "Ad" (ProtonMail, Surfshark, NextDNS in the excerpt above). The label sits inside the listing, so a sponsored tool can still appear in the Editor's Top Picks grid alongside unsponsored ones. When comparing, filter first by whether a listing is labeled "Ad," then compare the remaining editorial picks on the criteria above. A sponsored listing is not automatically a poor choice — Surfshark's audit and jurisdiction claims are checkable — but the placement itself is not evidence of quality.

How the site organizes recommendations

Beyond the top picks, the site structures guidance in three ways that affect how ratings should be used:

  1. Replace-one-app flow: "Pick the apps you use today, we'll show you private alternatives that actually work," with entry points for Chrome, Gmail, WhatsApp, Google Drive, and others. This is a migration aid, not a ranking.
  2. European Alternatives: a jurisdiction-first shortlist (Mullvad Browser, NordPass, StartMail, Mojeek, Surfshark, Internxt, SimpleX Chat, "+117 more"), where the selection criterion is European legal exposure rather than a star score.
  3. Category browsing: an "All categories" index, so a tool's score only means something relative to others in its own category.

A workable way to use the ratings

For a decision you can defend, use the site as a starting shortlist and then verify:

  • Check the label: note whether your candidate is marked "Ad."
  • Match the category: compare scores only within the same category (a 4.0 in Maps is not comparable to a 4.7 in Browsers).
  • Verify the headline claim: find the audit report, the source repository, or the jurisdiction statement on the vendor's site.
  • Check the pricing signal: the site references subscriptions and free tiers in descriptions (e.g., Bitwarden "free for personal use," ProtonMail "free and paid plans"), but the page does not publish prices — confirm current terms with the vendor.

The site's own positioning — "the most reliable website for privacy tools since 2015" — is a longevity claim, not a testing methodology. Its value is in curated discovery and consistent criteria; the final judgment on any tool still rests on the primary evidence its descriptions point to.