Is Citi Mobile safe to use?

Citi Mobile integrates 18 third-party SDKs spanning analytics and infrastructure. It collects data linked to your identity including Financial Info, Location, Contact Info, and Contacts and 4 more categories. It does not include any advertising or attribution SDKs. Whether this is acceptable depends on your personal privacy preferences.

What permissions does Citi Mobile need?

Citi Mobile requests 13 iOS permissions: Camera, Microphone, Contacts, Photo Library, Location (When In Use), Location (Always), Location (Always & When In Use), Calendars, Face ID, Save to Photo Library, Bluetooth, Bluetooth Peripheral, and Siri.

What data does Citi Mobile collect?

According to its App Store privacy label, Citi Mobile collects data linked to your identity including Financial Info, Location, Contact Info, Contacts, User Content, Identifiers, Usage Data, and Diagnostics.

How many SDKs does Citi Mobile have?

Citi Mobile integrates 18 third-party SDKs. 6 for analytics, 2 for infrastructure, and 10 for other. None are for advertising or attribution.

Does Citi Mobile access your location?

Yes. Citi Mobile requests location access. The developer states: "Citi uses your location to help you find Citi ATMs and branches. Your location will be used for other optional features, if you choose to enable them.".

Does Citi Mobile access your camera or microphone?

Citi Mobile requests access to both your camera and microphone. The developer says camera access is for "This feature requires access to the camera". Microphone access is for "This enables Citi® Trusted Identity". These permissions are only active when you grant them in iOS Settings.

Does Citi Mobile access your contacts?

Yes. Citi Mobile requests access to your contacts. The developer states: "This enables payment to contacts with Citi®.".

Does Citi Mobile run in the background?

Yes. Citi Mobile registers 4 background modes, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to Citi Mobile?

Other finance apps include EarnIn , Albert , Allstate , Amex , Atlas , and Autopilot . Each app takes a different approach to finance and varies in its data collection and SDK usage.

Finance · Privacy report

Citi Mobile®

Free · ★4.9 · Citibank

Is Citi Mobile safe?

It collects a lot of your data, and shares it with trackers.

Our take. Citi Mobile carries 6 third-party trackers and its own label declares it links 8 categories of your data to you. It collects a lot itself, and shares a lot with outside companies.

Privacy footprint · vs 80 financeModerate

Trackers from other companies6 · some

typical finance: 3.5

Data the app links to you8 types · some

typical finance: 6 · from its own privacy label

What it collects about you

Citi Mobile links 8 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data Citi Mobile ties to your identity.

Financial InfoLocationContact InfoContactsUser ContentIdentifiersUsage DataDiagnostics

Who else is inside

It carries trackers from 1 company.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🏢Other third partiesanalytics

A third-party SDK.

SDKs

How it compares

Where it sits among finance.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one finance app. Citi Mobile sits to the right, carrying more third-party tracking than most.

The evidence

What it's built from.

All 18 SDKs in the app, grouped by what they are for. 6 are third-party trackers.

6analytics

12standard libraries

6 of the 18 are third-party trackers. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

Other third partiesanalytics

Adobe Analytics · Adobe Experience Platform · Adobe Identity · Adobe Lifecycle · Adobe Rules Engine · Adobe Services

Standard libraries12 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v9.93.0, 2026-04-04.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 80 finance in our corpus. Trackers: median 3.5. Data linked to you: median 6.