Is U-Haul safe to use?

U-Haul integrates 4 third-party SDKs for attribution. It collects data linked to your identity including Usage Data. It includes 1 advertising or attribution SDK. Whether this is acceptable depends on your personal privacy preferences.

What permissions does U-Haul need?

U-Haul requests 13 iOS permissions: Camera, Microphone, Contacts, Photo Library, Location (When In Use), Location (Always), Location (Always & When In Use), Calendars, Motion & Fitness, Speech Recognition, Face ID, Save to Photo Library, and Bluetooth.

What data does U-Haul collect?

According to its App Store privacy label, U-Haul collects data linked to your identity including Usage Data. It collects Location and Diagnostics not linked to your identity.

How many SDKs does U-Haul have?

U-Haul integrates 4 third-party SDKs. 1 for attribution and 3 for other. None are for analytics.

Does U-Haul access your location?

Yes. U-Haul requests location access. The developer states: "Location is required to find U-Haul™ dealer locations, and for equipment rentals and returns.".

Does U-Haul access your camera or microphone?

U-Haul requests access to both your camera and microphone. The developer says camera access is for "Photo access is required for driver and equipment verification during the rental process". Microphone access is for "Phone number is required for the contract to contact dealer in case of an issue". These permissions are only active when you grant them in iOS Settings.

Does U-Haul access your contacts?

Yes. U-Haul requests access to your contacts. The developer states: "Allow access to contacts to support adding an upcoming reservation to calendar.".

Does U-Haul run in the background?

Yes. U-Haul registers 6 background modes, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to U-Haul?

Other travel apps include Air Canada , Aeroméxico , Air France , Airalo , Airbnb , and Priority Pass+ . Each app takes a different approach to travel and varies in its data collection and SDK usage.

Travel · Privacy report

U-Haul

Free · ★4.5 · U-Haul International, Inc.

Is U-Haul safe?

It leans heavily on third-party trackers.

Our take. U-Haul is built with more third-party tracking code than 18% of the travel we have scanned, including an analytics SDK from Israel.

Privacy footprint · vs 103 travelModerate

Trackers from other companies1 · some

typical travel: 5

Data the app links to you1 type · little

typical travel: 5 · from its own privacy label

What it collects about you

U-Haul links 1 category of your data to you.

From the developer's own App Store privacy label. These are the kinds of data U-Haul ties to your identity.

Usage Data

Who else is inside

It carries trackers from 1 company.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🇮🇱AppsFlyerAttribution · Israel

Marketing attribution and audience analytics.

SDK

How it compares

Where it sits among travel.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one travel app. U-Haul sits to the lower left, lighter than most.

Other signals

One more flag.

Each is a fact read straight from the app. The same checks run on every app we scan. Only the ones that apply here are shown.

It sends analytics to a company in Israel

AppsFlyer is a Israel company. Its analytics SDK is built into the app.

The evidence

What it's built from.

All 4 SDKs in the app, grouped by what they are for. 1 are third-party trackers.

1attribution

3standard libraries

1 of the 4 is a third-party tracker. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

AppsFlyerAttribution · Israel

AppsFlyer

Standard libraries3 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v3.10.0, 2026-04-03.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 103 travel in our corpus. Trackers: median 5. Data linked to you: median 5.