Is Locket safe to use?

Locket integrates 79 third-party SDKs spanning infrastructure, advertising, and analytics. Its App Store privacy label declares cross-app tracking via Identifiers. It collects data linked to your identity including Purchases, Location, Contact Info, and Contacts and 4 more categories. It includes 12 advertising or attribution SDKs. Whether this is acceptable depends on your personal privacy preferences.

What permissions does Locket need?

Locket requests 9 iOS permissions: App Tracking Transparency, Camera, Microphone, Contacts, Photo Library, Location (When In Use), Motion & Fitness, Save to Photo Library, and Apple Music.

What data does Locket collect?

According to its App Store privacy label, Locket declares cross-app tracking via Identifiers. It collects data linked to your identity including Purchases, Location, Contact Info, Contacts, User Content, Identifiers, Usage Data, and Diagnostics.

How many SDKs does Locket have?

Locket integrates 79 third-party SDKs. 12 for advertising, 6 for analytics, 1 for payments, 4 for social integration, 24 for infrastructure, and 25 for other.

Does Locket use Google SDKs?

Yes. Locket includes 26 Google or Firebase SDKs: Firebase A/B Testing, Firebase Core, Firebase Remote Config, Firebase Auth, Firebase Installations, Firebase Cloud Messaging, Google Data Transport, ExtensionFirebaseFunctionsClientLive, ExtensionFirebaseHelpers, FirebaseClientHelpers, Firebase Core Extension, Firebase Core Internal, Firebase Firestore, FirebaseFunctionsClient, FirebaseHelpers, Firebase Shared Swift, Google Interactive Media Ads (IMA), Google Utilities, Google Utilities, Google Utilities, Google Utilities, Google Utilities, Google Utilities, Google Utilities, Google Utilities, and LocketFirebase. These are primarily used for advertising.

Does Locket use App Tracking Transparency?

Yes. Locket requests the App Tracking Transparency permission, which means it asks for your consent to track your activity across other companies' apps and websites.

Does Locket access your location?

Yes. Locket requests location access. The developer states: "Locket uses your location to let you share your location with your friends.".

Does Locket access your camera or microphone?

Locket requests access to both your camera and microphone. The developer says camera access is for "Locket uses your camera to let you take pictures to share with your friends". Microphone access is for "Locket uses your microphone to let you record video to share with your friends". These permissions are only active when you grant them in iOS Settings.

Does Locket access your contacts?

Yes. Locket requests access to your contacts. The developer states: "Find friends from your contacts on Locket. Your contacts may be uploaded to a server to help you add your friends.".

Does Locket run in the background?

Yes. Locket registers 1 background mode, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to Locket?

Other social networking apps include Yik Yak , 3F , AM , Backbone , BeReal. , and BiP . Each app takes a different approach to social networking and varies in its data collection and SDK usage.

Social Networking · Privacy report

Locket Widget

Free · ★4.8 · Locket Labs, Inc.

Is Locket safe?

It leans heavily on third-party trackers.

Our take. Locket is built with more third-party tracking code than 91% of the social networking we have scanned.

Privacy footprint · vs 97 social networkingHeavy

Trackers from other companies17 · a lot

typical social networking: 4

Data the app links to you8 types · some

typical social networking: 5 · from its own privacy label

What it collects about you

Locket links 8 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data Locket ties to your identity, and it also declares it shares data to track you across other apps.

PurchasesLocationContact InfoContactsUser ContentIdentifiersUsage DataDiagnostics

Who else is inside

It carries trackers from 4 companies.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🏢Other third partiesadvertising

A third-party SDK.

SDKs

🇺🇸GoogleAnalytics

Firebase, AdMob and Google analytics SDKs, built to record how you use the app and serve ads.

SDKs

🇺🇸AmplitudeAnalytics

Product analytics, built to record detailed behaviour inside the app.

SDK

🇺🇸LiftoffAdvertising

In app video advertising network.

SDK

How it compares

Where it sits among social networking.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one social networking app. Locket sits to the right, carrying more third-party tracking than most.

Other signals

One more flag.

Each is a fact read straight from the app. The same checks run on every app we scan. Only the ones that apply here are shown.

It declares cross-app tracking

Its own App Store label says it tracks you across other companies apps and websites using your advertising identifier.

The evidence

What it's built from.

All 79 SDKs in the app, grouped by what they are for. 17 are third-party trackers.

12advertising

5analytics

1push & messaging

61standard libraries

17 of the 79 are third-party trackers. One is a push-notification SDK that delivers notifications, rather than tracking you across apps. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

Other third partiesadvertising

Google Interactive Media Ads (IMA) · Moloco Ads · Nimbus Ads Core · Nimbus Ads · Nimbus Ads Render Extensions · Nimbus Ads Render · Nimbus Ads Render Static · Nimbus Ads VAST · Nimbus Ads Render Video · Nimbus Ads Request · Open Measurement SDK (Nimbus)

GoogleAnalytics · USA

Firebase A/B Testing · Firebase Core · Firebase Remote Config · Google Analytics Connector

AmplitudeAnalytics · USA

Amplitude

LiftoffAdvertising · USA

Vungle Ads

Push & messaging1 · notifications

OneSignal

Standard libraries61 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v2.39.1, 2026-04-01.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 97 social networking in our corpus. Trackers: median 4. Data linked to you: median 5.