Recommended Free Tools
A privacy directory’s trust score is worth relying on only to the extent that you can inspect its method, trace its claims to evidence, confirm what was assessed and when, and understand what the score leaves unknown. Treat it as a summary of a defined assessment—not a guarantee that a product is safe or unsafe.
Start with the scoring method
A score is difficult to audit if the directory does not explain how it was produced. Look for a dated, versioned methodology that defines the criteria, scoring range, weights or decision rules, and treatment of missing, conflicting, or ambiguous information. Check whether the directory distinguishes policy review, automated scans, staff analysis, company self-reports, user reports, and independent audits.
Also find out what the score is designed to communicate. Common Sense Privacy’s documentation distinguishes evaluation levels, overall scores, and concern categories. It describes its Full evaluations as a “155-point inspection,” but the visible page text consulted does not give that figure a publication year. Its guidance also cautions that a high overall score does not mean a product is problem-free, and a low score does not by itself mean the product is unsafe.
Purpose matters when considering other scorecards. The DIACC Privacy Scorecard is a self-assessment and learning tool, not a compliance checklist or legal advice. It asks assessors to document evidence for ratings and addresses topics including data minimization, anti-tracking, and security. It also asks whether an independent security certification or audit exists. A self-assessment of this kind is not automatically comparable to a consumer-facing directory ranking.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
Trace each important claim to evidence
Prefer a score page that lets you see what supports its findings: item-level citations, relevant policy language, observed technical signals, public audit documents, or records from regulators and courts where relevant. Look for the date of the evidence as well as the directory’s conclusion. A policy describes what an organization discloses; it does not, by itself, verify that every practice operates as described. Conversely, an absent disclosure is not proof of misconduct.
Keep evidence types distinct. A company statement, a policy review, a technical observation, and an independent audit answer different questions. Certification evidence also needs context: check the issuer, current status, assessed entity, and scope rather than treating a logo as proof of broad privacy protection.
The Internet Society’s 2019 Online Trust Audit methodology illustrates one approach: analysts reviewed privacy statements for matters such as sharing, retention, notices, and access to policy versions, alongside technical and domain-security checks. The methodology describes a website audit as a “slice of time” that may miss technologies researchers or tools did not observe. It is a design example, not current evidence about any particular website.
TRUSTe’s Data Privacy Framework verification criteria offer another example of specific checks, including whether notices explain collection sources and purposes, use and disclosures, third-party sharing, contacts, and access or correction procedures. That document is version 1.0, last updated July 10, 2023, and applies to that program; it is not a universal checklist or proof that a directory uses those checks.
Confirm exactly what was assessed and when
Identify the object and boundaries of the evaluation before applying its score to your own situation. Check the product or service name, app version, website, operating system where relevant, features covered, geographic region, and assessment date. A directory may cover one product surface or jurisdiction without assessing another.
Look for the date evidence was collected or reviewed, not just the date a page was published or edited. Then check whether the directory keeps a dated change history showing why a rating changed. Privacy notices, technical configurations, and business practices can change after an assessment; a score without a meaningful evidence date may not describe the current service.
Read uncertainty and limitations, not just the headline number
A useful directory tells you when information was unavailable, unclear, or contradictory and how those gaps affected the result. It should also state what its method cannot detect. For example, a policy-based review cannot establish every actual data flow, while a technical scan can only report what its tools observed within their scope.
Interpret a composite score only within the dimensions and rules it actually measures. Common Sense Privacy explains that its overall score is derived from defined evaluation questions, while concern scores organize issue-specific dimensions. Its warning that high-scoring products may still have problems—and low-scoring products are not necessarily unsafe—is a sound reason to use a number to decide what to investigate next, rather than as a verdict beyond the assessment’s scope.
Free tools Windows power users keep installed
One-click scans. No signup required.
Best Value
- No more exposed information in unprotected notary journals. This product shields clients' confidential information from prying eyes. It allows the Notary Public to keep the journal open during the transaction, as NO prior client information is viewable.
- Shields clients' AND Notary Publics' confidential information
- GLBA and HIPAA require non-disclosure policies and procedures. Notary Privacy Guard is a compliance tool for the professional Notary Public.
- Decreases Notary Public's liability from exposing client information
- Journal column headers are printed on the Notary Privacy Guard, no having to peek underneath to complete the journal entry. Becomes part of the journal and also acts as a place marker.
Compare directories on shared axes
When assessing more than one directory, compare the underlying assessment rather than assuming their numbers share a common scale. A score of 90 at one provider may represent different questions, evidence, and weighting from a 90 at another.
| Comparison axis | What to check |
|---|---|
| Method transparency | Published criteria, version history, weights or decision rules, and handling of missing data. |
| Evidence quality | Whether findings rely on direct observations and authoritative records, policy text, self-report, or uncorroborated reports. |
| Coverage | Products, jurisdictions, privacy topics, and technical controls included in each assessment. |
| Recency | Evidence collection or review date and stated update cadence. |
| Uncertainty | Visible unknowns, confidence information, and stated blind spots. |
| Accountability | Correction or appeal process, explanations of score changes, and independent review. |
| Comparability | Whether the providers use the same scale and substantially similar inputs. |
Evaluation depth can differ even within one directory. Common Sense Privacy publishes Quick, Basic, and Full evaluation levels, so check the level behind a rating before comparing it with another entry or provider.
Check whether the directory can be challenged
Look for a clear way to report an error, provide contrary evidence, or dispute an assessment. A reliable process should explain how corrections are reviewed and show when and why a score or finding changes. Without that accountability, a transparent-looking score may still be difficult to correct when its evidence is outdated or incomplete.
Use the score as a screening tool
Do not treat HTTPS or a valid security certificate as proof that an organization’s data practices are privacy-protective; those signals concern only part of the picture. Likewise, do not convert a score into a broad safety judgment when the directory’s scope, evidence, or date does not support one. Use the rating to identify questions worth checking against the underlying evidence and the service you actually use.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
