Is American safe to use?

American integrates 13 third-party SDKs spanning analytics and infrastructure. It collects data linked to your identity including Health & Fitness, Purchases, Financial Info, and Contact Info and 6 more categories. It does not include any advertising or attribution SDKs. Whether this is acceptable depends on your personal privacy preferences.

What permissions does American need?

American requests 9 iOS permissions: Camera, Contacts, Photo Library, Location (When In Use), Location (Always), Location (Always & When In Use), Calendars, Siri, and NFC.

How many SDKs does American have?

American integrates 13 third-party SDKs. 6 for analytics, 2 for infrastructure, and 5 for other. None are for advertising or attribution.

Does American access your location?

Yes. American requests location access. The developer states: "This app can use your location information while you are using the app to find airports and to provide traffic information on your day of travel.".

Does American access your camera?

American requests access to your camera. The developer says this is for "Please allow us to access your camera to scan travel documents and credit cards". These permissions are only active when you grant them in iOS Settings.

Does American access your contacts?

Yes. American requests access to your contacts. The developer states: "This app can access your Contacts in order to send flight information to contacts you choose.".

Does American run in the background?

Yes. American registers 2 background modes, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to American?

Other travel apps include Air Canada , Aeroméxico , Air France , Airalo , Airbnb , and Priority Pass+ . Each app takes a different approach to travel and varies in its data collection and SDK usage.

Travel · Privacy report

American Airlines

Free · ★4.7 · American Airlines

Is American safe?

It collects a lot of your data itself.

Our take. Its own App Store privacy label declares American links 10 categories of your data to your identity, including health & fitness, purchases, financial info and contact info. That collection, more than any outside tracker, is the story here.

Privacy footprint · vs 103 travelHeavy

Trackers from other companies6 · some

typical travel: 5

Data the app links to you10 types · a lot

typical travel: 5 · from its own privacy label

What it collects about you

American links 10 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data American ties to your identity.

Health & FitnessPurchasesFinancial InfoContact InfoUser ContentSearch HistoryBrowsing HistoryIdentifiersUsage DataDiagnostics

Who else is inside

It carries trackers from 1 company.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🏢Other third partiesanalytics

A third-party SDK.

SDKs

How it compares

Where it sits among travel.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one travel app. American sits high on the left: it collects a lot itself but uses few outside trackers.

The evidence

What it's built from.

All 13 SDKs in the app, grouped by what they are for. 6 are third-party trackers.

6analytics

7standard libraries

6 of the 13 are third-party trackers. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

Other third partiesanalytics

Adobe Analytics · Adobe Experience Platform · Adobe Identity · Adobe Lifecycle · Adobe Rules Engine · Adobe Services

Standard libraries7 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v2026.8, 2026-04-03.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 103 travel in our corpus. Trackers: median 5. Data linked to you: median 5.