Is PayByPhone safe to use?

PayByPhone integrates 64 third-party SDKs spanning infrastructure, analytics, and payments. It collects data linked to your identity including Purchases, Financial Info, Location, and Contact Info and 5 more categories. It does not include any advertising or attribution SDKs. Whether this is acceptable depends on your personal privacy preferences.

What permissions does PayByPhone need?

PayByPhone requests 5 iOS permissions: Camera, Photo Library, Location (When In Use), Location (Always), and Location (Always & When In Use).

How many SDKs does PayByPhone have?

PayByPhone integrates 64 third-party SDKs. 10 for analytics, 6 for payments, 1 for social integration, 21 for infrastructure, and 17 for other. None are for advertising or attribution.

Does PayByPhone use Google SDKs?

Yes. PayByPhone includes 4 Google or Firebase SDKs: Firebase Core, Google Sign-In, Firebase Core Internal, and Google Utilities. These are used for cloud infrastructure and services, not advertising.

Does PayByPhone access your location?

Yes. PayByPhone requests location access. The developer states: "This app needs access to location when open.".

Does PayByPhone access your camera?

PayByPhone requests access to your camera. The developer says this is for "Use of the camera allows the addition of vehicle images and to aid credit card entry. No images are sent to PayByPhone". These permissions are only active when you grant them in iOS Settings.

Does PayByPhone run in the background?

Yes. PayByPhone registers 1 background mode, which means it can perform certain tasks when you're not actively using it.

What are some alternatives to PayByPhone?

Other travel apps include Air Canada , Aeroméxico , Air France , Airalo , Airbnb , and Priority Pass+ . Each app takes a different approach to travel and varies in its data collection and SDK usage.

Travel · Privacy report

PayByPhone Parking

Free · ★4.8 · PayByPhone Technologies Inc.

Is PayByPhone safe?

It collects a lot of your data, and shares it with trackers.

Our take. PayByPhone carries 10 third-party trackers and its own label declares it links 9 categories of your data to you. It collects a lot itself, and shares a lot with outside companies.

Privacy footprint · vs 103 travelHeavy

Trackers from other companies10 · a lot

typical travel: 5

Data the app links to you9 types · a lot

typical travel: 5 · from its own privacy label

What it collects about you

PayByPhone links 9 categories of your data to you.

From the developer's own App Store privacy label. These are the kinds of data PayByPhone ties to your identity.

PurchasesFinancial InfoLocationContact InfoUser ContentIdentifiersUsage DataDiagnosticsOther Data

Who else is inside

It carries trackers from 4 companies.

Third-party SDKs found in the app, matched to the company that publishes each. Present in the code; we do not observe what they transmit.

🏢Monitoring SDKAnalytics

Crash and performance monitoring.

SDKs

🇺🇸AmplitudeAnalytics

Product analytics, built to record detailed behaviour inside the app.

SDKs

🇺🇸GoogleAnalytics

Firebase, AdMob and Google analytics SDKs, built to record how you use the app and serve ads.

SDKs

🏢Other third partiesanalytics

A third-party SDK.

SDKs

How it compares

Where it sits among travel.

Every one of these apps we have scanned, on the two measures above: third-party trackers it carries (across) and data it links to you on its own label (up). Toward the top right is more invasive.

Each dot is one travel app. PayByPhone sits to the right, carrying more third-party tracking than most.

The evidence

What it's built from.

All 64 SDKs in the app, grouped by what they are for. 10 are third-party trackers.

10analytics

3push & messaging

51standard libraries

10 of the 64 are third-party trackers. 3 are push-notification SDKs that deliver notifications, rather than tracking you across apps. The rest are the app's own code and standard open-source building blocks.

Show the full SDK list

Monitoring SDKAnalytics

Datadog · Datadog Internal · Datadog Logs · Datadog RUM

AmplitudeAnalytics · USA

Amplitude · Amplitude (Flutter)

GoogleAnalytics · USA

Google Analytics Connector · Firebase Core

Other third partiesanalytics

Salesforce Marketing Cloud · Salesforce Marketing Cloud SDK

Push & messaging3 · notifications

AirshipKit · airship_flutter

Standard libraries51 · on-device

The app's own code plus open-source interface, storage and networking libraries.

How we know this

Counterspy downloads the app from the App Store and statically analyzes its compiled binary. Embedded SDKs are matched against a signature database and resolved to the company that operates each. We also read the developer's App Store privacy label, which lists the data the app says it collects and links to you. We do not run the app or intercept its traffic, so we report capabilities present in the code and the developer's own disclosures, not proven transmission. We assess privacy and data collection, not malware, security flaws, or developer intent. Reports are automated and never edited for payment. Scan v26.3.2, 2026-04-03.

Third-party trackers are advertising, analytics and attribution SDKs detected by static signature matching. Presence shows a capability is compiled in, not that it ran or transmitted data.
"Data the app links to you" is the count of data categories the developer declares as Data Linked To You in its App Store privacy label. Labels are self-reported and not verified by Apple.
Comparison across the 103 travel in our corpus. Trackers: median 5. Data linked to you: median 5.