Privacy Policy
Last updated 24 July 2026
Outpost is an iPhone app that checks your home network, screens suspicious messages and callers, and looks for exposed accounts. This policy explains exactly what stays on your phone, what leaves it, and who else is involved.
The short version
- There is no Outpost account. We don't ask for your name, email, or phone number to use the app.
- There is no advertising and no analytics or tracking SDK in the app. We do not build a profile of you, and we do not sell or share data with data brokers.
- Network scanning happens entirely on your iPhone. Your device list, IP addresses, MAC addresses, scan history, and risk findings are stored on the device and are never uploaded.
- A small number of features need the internet to work at all — a breach lookup, a link/number reputation check, an optional vulnerability lookup, and the Guardian summary you choose to share. Each is described below, and the app tells you before it uses one.
Stored on your device only
The following never leaves your iPhone, except in a backup you choose to make:
- Discovered devices and their details (names, IP and MAC addresses, open ports, detected services), scan history, security findings, alerts, groups, and trusted-network approvals.
- Your Call Guard list of blocked or labelled phone numbers. iOS performs the matching on incoming calls; Outpost is never told that a call arrived.
- Counts of protective checks used for the Protection Report. We record only that a check happened and its outcome — never the message, link, password, email address, or number involved.
- A trusted contact's phone number, if you add one, stored in the iOS keychain.
- Your imported App Privacy Report summary, if you use the App Privacy tool.
You can export or permanently erase all of it from Settings inside the app.
Location
Outpost requests location access for one purpose: iOS only reveals the name of the Wi‑Fi network you're connected to when an app has location permission. Outpost uses that name to confirm you're scanning your own network rather than a workplace, school, or public network. Your location is not stored, and it is never transmitted.
When information leaves your device
| Feature | What is sent | Who receives it |
|---|---|---|
| Scam check (Scam Brain) | The text you paste, and any screenshots you choose — resized, with photo metadata removed. Sent only when you tap to analyse. | Our scam-analysis service. It processes the request and does not retain it. |
| Live threat check | Only the links, phone numbers, and email addresses detected in the message. The message text itself is not sent. | Our reputation service. |
| Email breach check | The email address you type. | XposedOrNot, which provides the breach data. |
| Password check | Only the first five characters of a SHA‑1 hash of the password, never the password itself and never the full hash. The remaining comparison happens on your iPhone, so the service cannot learn which password you checked. | Have I Been Pwned (Pwned Passwords). |
| Vulnerability check (off by default) | A generic product and version string, such as “nginx 1.18.0”. No IP addresses, device names, or anything else about your network. | The U.S. National Vulnerability Database (nvd.nist.gov). |
| Guardian sharing (opt‑in) | A nickname you type, a protection score, a count of issues, a device count, and timestamps. No device names, addresses, messages, or history. | Apple iCloud (CloudKit), readable by whoever holds the sharing code you give out. Stop sharing at any time and the shared record is deleted. |
| Internet exposure check | A request to a public IP-lookup service, and connection attempts to your own public IP address. | A public IP-address service; the rest targets only your own network. |
Things Outpost cannot see
Because of how iOS works, Outpost has no access to your call history or call audio, your iMessages, or messages from people in your contacts. The SMS filter Apple provides only ever sees messages from unknown senders, and Outpost's classification of them runs on your device.
Subscriptions
Outpost Pro is sold through Apple's In-App Purchase. Apple processes the payment and tells the app only whether a subscription is active. We never see your payment details.
Children
Outpost is not directed at children and does not knowingly collect information from them.
Changes
If this policy changes in a way that affects what leaves your device, we'll update this page and the date above.
Contact
Questions about privacy: support@outpostsec.app.