Is Norwegian safe to use?

Norwegian integrates 55 third-party SDKs spanning infrastructure, analytics, and messaging. It collects data linked to your identity including Contact Info, Identifiers, and Sensitive Info. It does not include any advertising or attribution SDKs. Whether this is acceptable depends on your personal privacy preferences.

What permissions does Norwegian need?

Norwegian requests 5 iOS permissions: Camera, Microphone, Photo Library, Save to Photo Library, and Local Network.

What data does Norwegian collect?

According to its App Store privacy label, Norwegian collects data linked to your identity including Contact Info, Identifiers, and Sensitive Info. It collects Financial Info, Location, and Diagnostics not linked to your identity.

How many SDKs does Norwegian have?

Norwegian integrates 55 third-party SDKs. 11 for analytics, 18 for infrastructure, and 21 for other. None are for advertising or attribution.

Does Norwegian use Google SDKs?

Yes. Norwegian includes 10 Google or Firebase SDKs: Firebase Cloud Messaging, Firebase A/B Testing, Firebase Core, Firebase Remote Config, Firebase Remote Config Interop, Google Data Transport, Firebase Core Internal, Firebase Installations, Firebase Shared Swift, and Google Utilities. These are used for cloud infrastructure and services, not advertising.

Does Norwegian access your camera or microphone?

Norwegian requests access to both your camera and microphone. The developer says camera access is for "Camera is needed to take checkin selfie". Microphone access is for "Microphone is needed for the checkin selfie viewfinder". These permissions are only active when you grant them in iOS Settings.

Does Norwegian run in the background?

Yes. Norwegian registers 3 background modes, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to Norwegian?

Other travel apps include Air Canada , Aeroméxico , Air France , Airalo , Airbnb , and Priority Pass+ . Each app takes a different approach to travel and varies in its data collection and SDK usage.

Travel · Privacy report

Norwegian Cruise Line

Free · ★4.8 · Norwegian Cruise Line®

Is Norwegian safe?

It leans heavily on third-party trackers.

Our take. Norwegian is built with more third-party tracking code than 85% of the travel we have scanned.

Privacy footprint · vs 103 travelHeavy

Trackers from other companies11 · a lot

typical travel: 5

Data the app links to you3 types · little

typical travel: 5 · from its own privacy label

What it collects about you

Norwegian links 3 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data Norwegian ties to your identity.

Contact InfoIdentifiersSensitive Info

Who else is inside

It carries trackers from 2 companies.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🏢Other third partiesanalytics

A third-party SDK.

SDKs

🇺🇸GoogleAnalytics

Firebase, AdMob and Google analytics SDKs, built to record how you use the app and serve ads.

SDKs

How it compares

Where it sits among travel.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one travel app. Norwegian sits to the right, carrying more third-party tracking than most.

The evidence

What it's built from.

All 55 SDKs in the app, grouped by what they are for. 11 are third-party trackers.

11analytics

2push & messaging

42standard libraries

11 of the 55 are third-party trackers. 2 are push-notification SDKs that deliver notifications, rather than tracking you across apps. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

Other third partiesanalytics

Adobe Experience Platform · Adobe Identity · Adobe Lifecycle · Adobe Rules Engine · Adobe Services · New Relic

GoogleAnalytics · USA

Firebase A/B Testing · Firebase Core · Firebase Remote Config · Firebase Remote Config Interop · Google Data Transport

Push & messaging2 · notifications

Standard libraries42 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v1.35.1, 2026-04-03.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 103 travel in our corpus. Trackers: median 5. Data linked to you: median 5.