Investigation: over 75% of Android VPNs fail basic transparency tests

77% of Android VPNs studied fail basic accountability and transparency tests.
These 2,666 apps have amassed over 2 billion downloads combined
43% of the apps lack a usable website for troubleshooting or product research.
63% rely on non-proprietary email addresses (such as Gmail)
54% of apps have a substandard or inaccessible privacy policy

If you’re looking for a VPN for your Android device, it pays to be skeptical. Exclusive research by TechRadar has found that 77% of VPNs on the Google Play Store raise significant transparency and accountability concerns. And given these apps handle your sensitive browsing data, that’s a major red flag.

Of the 3,471 Android applications that claim to protect user privacy, we found that 2,666 have significant flaws.

A total of 601 (17%) lack a website entirely and, where links are provided, they frequently direct to single-page domains hosted on free platforms rather than dedicated sites.

Developer identity is similarly opaque. 2,193 (63%) of these Android VPN providers rely on free webmail addresses like Gmail or use dead-end email accounts that immediately bounce messages.

Most shocking of all, these apps represent an astonishing 2 billion downloads combined, making this a lack of professionalism of major concern.

Responding to our findings, a Google Spokesperson said: “Google Play has policies in place to keep users safe that all developers, including VPN apps, must adhere to. We take security and privacy claims against apps seriously, and if we find that an app has violated our policies, we take appropriate action.”

Why most Android VPNs can’t be trusted

Proprotion of Android VPNs that failed to make the grade.

Failure rates by category (%)

Use personal email (e.g. Gmail)

Substandard privacy policies

Websites

In addition to the 601 VPNs without a website, 386 other VPNs linked to completely inaccessible URLs. Combined, this means that 28.4% of the Android VPN market lacks any usable web presence, resulting in no platform for users to research the company, browse the product range, or check prices.

Of the Android VPN apps that do host a website, 864 use third-party services such as Wix or Blogspot. While not an automatic problem, using these services doesn’t suggest there’s much investment into the actual product either — let alone its security.

An additional 489 of the accessible websites failed to lead to a legitimate landing page or functional site. When combined with those lacking an accessible URL, 1,476 Android VPN apps — nearly half of the total database — provide no meaningful online information or support for their users Again, this is not exactly a ringing endorsement for any trustworthy service.

Swipe to scroll horizontally

Example VPNs
VPN	Android downloads	Website link	Issue
AM Tunnel Lite VPN	10+ million	https://antunnellite.blogspot.com/	Free blogspot URL with a singular post from 2022.
MTM Tunnel Lite	10+ million	https://mtmworkz.blogspot.com/	A single web page that says ‘there’s nothing here’
Cozy VPN	5+ million	https://richly.imiyoo.net/	A blank page with only the word ‘hi’.
Nexis VPN	1+ million	https://richly.imiyoo.net/	Free page with only the name as content
Protect VPN Pro	1+ million	https://vpn.type.link	A free web page that displays a message saying access has been restricted at the request of authorities.

Privacy policies

Privacy policies are an essential component of any legitimate VPN. However, 47% of the 3,471 Android VPNs analyzed host their privacy policies on third-party services.

As a significant portion of these apps lack a dedicated website, it’s likely these have been generated just to satisfy Google’s requirement that Play Store apps provide accessible privacy documentation.

If Google’s automated systems deem a document sufficiently comprehensive, the app is permitted on the storefront. This remains the case even if the policy uses vague language to obscure data-sharing practices or omits the specific security details expected of a VPN.

We found that 524 (15.1%) of the privacy policy URLs provided were entirely inaccessible and an additional 85 policies consisted of fewer than 200 words. Technical Editor Mike Williams said: “that’s not nearly enough to explain your privacy rights.”

All in, that means 1,874 privacy policies were either inaccessible or not up to standard.

Image 1 of 3

ACE VPN privacy policy — ACE VPN’s privacy policy takes no scrolling to read in its entirety. (Image credit: Future)

Email

Even if a VPN provider appears trustworthy based on its store listing, technical failures often are common. While premium VPN services typically offer dedicated support teams, our research shows that support networks for the majority of Android VPNs are practically non-existent.

2,193 (63.2%) apps use a third-party or free webmail address as their primary point of contact. While a Gmail address should not disqualify a developer, trusting a company that hasn’t invested in a proprietary email address with your sensitive browsing data requires a leap of faith.

To test customer service response time in more detail, we selected a sample of 216 mid-sized VPNs with download counts ranging from 50,000 to 5 million. We sent a standard troubleshooting request to their provided support addresses: “Hi, I’m using your Android VPN, but it often won’t connect. Is there anything I can do? Thanks!”

Immediately, 17 emails bounced as undeliverable. Most of these failed addresses (9) were registered to “@app-ads.info” domains, while the remainder were Gmail accounts.

Even after 14 days, only 19 VPNs (8.8%) responded to the query. Seven of those responses arrived within the first hour, with an additional six arriving later that same day.

Notably, seven of the successful responders were smaller apps with 50,000 to 100,000 downloads, while only two VPNs with over 1 million downloads replied. This indicates that high download counts are not a reliable metric for customer support quality.

Swipe to scroll horizontally

Number of downloads	Number of apps	Number of responses
50,000 to 99,999	49	7 (14.3%)
100,000 to 1 million	131	10 (7,6%)
1 million +	37	2 (5.4%)

Untrustworthy VPNs have a documented history of harvesting and selling user data while monitoring connections. This practice fundamentally undermines the purpose of using a privacy tool

Meanwhile, the best VPNs on the market — including the top-rated free options — always provide robust, highly detailed privacy policies that are easily accessible through both the app store listing and the VPN provider’s official website.

It is important to vet a provider’s customer support infrastructure before trusting them with your web traffic. In our broader testing of industry leaders like NordVPN, Surfshark, and ExpressVPN, we consistently find that trustworthy VPN providers offer multiple avenues for contact, including 24/7 live chat, and typically resolve email tickets within 24 hours.

If an app lacks a clear support portal or uses a non-proprietary email address, it is a strong indicator that help will be unavailable should the service fail. You’ll also have little to no recourse on the money you’ve already spent.

Finally, scrutinize user reviews before hitting download. If the comments appear generic, overly enthusiastic, or are repeated across multiple listings, they are likely bot-generated reviews designed to simulate legitimacy.

A reliable service is more likely to feature a mix of reviews — both positive and critical — with varied language and, ideally, direct responses from the developer addressing user issues.

Our methodology

Technical Editor Mike Williams led this research project, utilizing his proprietary VPNCrawler tool to identify 3,471 Android VPN apps currently listed on the Google Play Store. This represents the largest dataset of its kind ever recorded by a major publication.

Through automated testing, Williams isolated critical data points from each VPN provider, including domain ownership, contact information, and the scale of its web infrastructure and privacy documentation. These findings were then subject to a comprehensive manual analysis by Williams alongside TechRadar VPN Editor Rob Dunne and VPN Managing Editor Samuel Woodhams.

Our email responsiveness testing was conducted over a two-week period. To ensure the results were representative of the real-world user experience, we filtered our sample to exclude both extreme outliers and niche apps with negligible visibility. Instead, we focused on “mid-tier” providers — those most likely to appear in search results and be inadvertently downloaded by users seeking a quick privacy solution.