Is Rocket Mortgage safe to use?

Rocket Mortgage integrates 11 third-party SDKs spanning analytics, media, and advertising. It collects data linked to your identity including Financial Info, Contact Info, User Content, and Identifiers and 2 more categories. It includes 2 advertising or attribution SDKs. Whether this is acceptable depends on your personal privacy preferences.

What permissions does Rocket Mortgage need?

Rocket Mortgage requests 2 iOS permissions: Camera and Face ID.

How many SDKs does Rocket Mortgage have?

Rocket Mortgage integrates 11 third-party SDKs. 1 for advertising, 1 for attribution, 6 for analytics, 1 for payments, and 1 for other.

Does Rocket Mortgage use Google SDKs?

Yes. Rocket Mortgage includes 3 Google or Firebase SDKs: Google Ads Conversion, Firebase Analytics, and Google App Measurement. These are used for ads, analytics, and cloud services.

Does Rocket Mortgage access your camera?

Rocket Mortgage requests access to your camera. The developer says this is for "Rocket Mortgage will use your camera so you can take pictures of documents that we need from you during the mortgage process". These permissions are only active when you grant them in iOS Settings.

Does Rocket Mortgage run in the background?

Yes. Rocket Mortgage registers 1 background mode, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to Rocket Mortgage?

Other finance apps include EarnIn , Albert , Allstate , Amex , Atlas , and Autopilot . Each app takes a different approach to finance and varies in its data collection and SDK usage.

Finance · Privacy report

Rocket Mortgage

Free · ★4.9 · Rocket Mortgage, LLC

Is Rocket Mortgage safe?

It leans heavily on third-party trackers.

Our take. Rocket Mortgage is built with more third-party tracking code than 75% of the finance we have scanned.

Privacy footprint · vs 80 financeHeavy

Trackers from other companies8 · a lot

typical finance: 3.5

Data the app links to you6 types · some

typical finance: 6 · from its own privacy label

What it collects about you

Rocket Mortgage links 6 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data Rocket Mortgage ties to your identity.

Financial InfoContact InfoUser ContentIdentifiersUsage DataDiagnostics

Who else is inside

It carries trackers from 4 companies.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🏢Other third partiesadvertising

A third-party SDK.

SDKs

🇺🇸AmplitudeAnalytics

Product analytics, built to record detailed behaviour inside the app.

SDKs

🇺🇸SingularAttribution

Marketing attribution and analytics.

SDK

🇺🇸GoogleAnalytics

Firebase, AdMob and Google analytics SDKs, built to record how you use the app and serve ads.

SDK

How it compares

Where it sits among finance.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one finance app. Rocket Mortgage sits to the right, carrying more third-party tracking than most.

The evidence

What it's built from.

All 11 SDKs in the app, grouped by what they are for. 8 are third-party trackers.

1advertising

1attribution

6analytics

3standard libraries

8 of the 11 are third-party trackers. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

Other third partiesadvertising

Google Ads Conversion · Google App Measurement · Salesforce Marketing Cloud · Salesforce Marketing Cloud SDK

AmplitudeAnalytics · USA

Amplitude · Amplitude Session Replay

SingularAttribution · USA

Singular

GoogleAnalytics · USA

Firebase Analytics

Standard libraries3 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v10.26.0, 2026-04-04.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 80 finance in our corpus. Trackers: median 3.5. Data linked to you: median 6.