Based on our analysis, Apple is the more privacy-respecting choice overall.
BACK →Overall
Apple
B+ · 78/100Samsung
D · 38/100What they collect
Apple
Mixed (72)
Samsung
Concern (28)
Who they share it with
Apple
Positive (82)
Samsung
Concern (30)
What you can do
Apple
Positive (80)
Samsung
Mixed (48)
What they promise
Apple
Positive (82)
Samsung
Mixed (46)
| Category | Apple | Samsung |
|---|---|---|
| Overall | B+ · 78/100 | D · 38/100 |
| What they collect | Mixed (72) | Concern (28) |
| Who they share it with | Positive (82) | Concern (30) |
| What you can do | Positive (80) | Mixed (48) |
| What they promise | Positive (82) | Mixed (46) |
Apple collects significantly less data than other big tech companies and explicitly commits — using both Nevada and California legal definitions — to never selling or sharing your data for advertising. Their own ad platform doesn't use data brokers or cross-app tracking. Private personal data isn't used to train Apple's AI models. The main caveats are health, fitness, and financial data collection, government ID in some cases, and personalised ads that exist but are easy to turn off.
View full analysis →Samsung Australia collects an unusually wide sweep of data for a hardware company — IMEI numbers, MAC addresses, GPS location, voice commands sent to third-party servers, health metrics from Galaxy devices, contacts lists, browsing behaviour, and financial details. Data is shared with affiliates, business partners (including wireless carriers who can independently use it for promotions), and service providers, and is transferred to up to 16 countries including South Korea, China, and India. The policy acknowledges those countries may have weaker privacy protections than Australia, and users effectively waive the right to demand overseas recipients comply with Australian law just by using the services. Some controls are decent — a resettable Advertising ID, a 30-day access response window, and Samsung Pay that doesn't log transaction details — but retention periods are entirely vague, no security certifications are named, and there is no breach notification commitment.
View full analysis →You might also want to compare