Do Email Cleaners Sell Your Data?
Free inbox cleaners have to make money somehow. For some of the best-known names, the answer is the receipts sitting in your inbox.
This isn't speculation. It's in their own privacy notices, and in one case, a Federal Trade Commission order. Here is the documented record, so you can decide who you let into your Gmail.
The short answer
| App | Who owns it | Sells or shares data derived from your email? | Source |
|---|---|---|---|
| Unroll.Me | NielsenIQ | Yes, per its privacy notice | Unroll.Me privacy notice |
| Cleanfox | NielsenIQ | Yes, per its terms ("offer for sale for statistical purposes") | Cleanfox terms |
| Edison Mail | YipitData affiliate | Shares de-identified data with affiliates and business subscribers (opt-out available) | Edison privacy policy |
| MailMop | Independent | No. Paid for by subscriptions; email is analyzed in your browser | MailMop security |
Unroll.Me: the case that started it all
Unroll.Me became famous for one-click unsubscribing, and then for something else.
April 2017. A New York Times profile of Uber reported that Uber had bought anonymized data about Lyft rides from Slice Intelligence, Unroll.Me's parent company. Slice had gathered the Lyft receipts from Unroll.Me users' inboxes (The Intercept).
May 2018. Unroll.Me said it would shut off service to users in the EU before GDPR took effect (TechCrunch).
August 2019. The FTC alleged that Unroll.Me told hesitant users it wouldn't "touch" their personal emails, while sharing their e-receipts with Slice for use in market-research products (FTC).
December 2019. The FTC finalized an order barring Unroll.Me from misrepresenting how it collects and shares data, and requiring it to delete stored e-receipts from affected users unless they consented (FTC).
Today. Unroll.Me describes itself as "a NielsenIQ company." Its April 2025 privacy notice says it may "sell" or "share" some types of personal information, and provides data derived from commercial emails to customers it says include investment companies and data brokers (Unroll.Me).
Cleanfox: free cleaning, paid for by your receipts
Cleanfox is upfront about the trade. Its terms describe the business model as creating data from the transactions in your email account, which it offers "for sale for statistical purposes." In exchange for free cleaning, NielsenIQ gets the right to extract data from your transactional emails (Cleanfox terms).
The terms also say a limited part of its teams may access your transactional emails. Its privacy notice, operated by a NielsenIQ company, lists data brokers among the recipients of pseudonymized datasets, and offers an in-app opt-out (Cleanfox privacy).
NielsenIQ acquired Cleanfox's parent, Foxintelligence, in 2021, and now sells the data as "Foxintelligence by NielsenIQ" (NielsenIQ).
Edison Mail: a popular inbox app with a data business
Edison isn't a pure cleaner, but it's widely used to manage and unsubscribe from Gmail.
July 2018. The Wall Street Journal reported that employees at several Gmail app developers, including Edison, had read users' emails while building features (The Register).
February 2020. Motherboard reported that Edison scraped inboxes for purchase receipts, and that Edison-derived "consumer purchase metrics" appeared in a J.P. Morgan document (MediaPost).
May 2020. A sync bug in Edison's iOS app let some users see other people's email accounts. Edison rolled back the update and called it a bug, not a breach (9to5Mac).
Today. Edison's privacy policy says it processes "Commercial Data" such as receipts and bills, and may disclose de-identified data to affiliates including YipitData and to business subscribers. Users can opt out (Edison privacy policy).
What about Clean Email, Mailstrom, Leave Me Alone, and others?
To be fair: we found no reputable reporting of data sales, breaches, or regulatory action involving Clean Email, Mailstrom, Leave Me Alone, SaneBox, or Trimbox. Most of them charge subscriptions, which is a healthier business model than selling receipt data.
The remaining difference is architecture. Most cleanup tools process your mail on their own servers. That's not wrongdoing, but it does mean another company holds data from your inbox. We compare the approaches in Privacy-Focused Gmail Cleanup Tools.
How Google changed the rules
The 2018 WSJ report pushed Google to act. In October 2018 it announced Project Strobe, limiting Gmail access to apps that directly improve email and requiring security assessments (Google). The new rules took effect in January 2019 (Google Developers).
Today, Google's user data policy says apps using Gmail data may only use it to provide user-facing features, may not sell it to data brokers or use it for ads, and must pass an annual third-party security assessment, now called CASA (Google API Services User Data Policy, Google Cloud).
Rules help, but the safest data is data that's never collected.
How to choose a cleaner that doesn't sell your inbox
- Follow the money. If a tool is free with no paid plan, find out how it makes money before connecting it.
- Read the privacy notice for "sell," "share," and "data brokers." It takes 30 seconds with Ctrl+F.
- Prefer browser-based processing. If your inbox is analyzed on your own device, there's no server-side copy to sell or leak.
- Check for CASA. It's Google's security bar for apps with restricted Gmail access.
- Revoke what you don't use at myaccount.google.com/connections.
Our full checklist is in How to Clean Up Gmail Without Giving Up Your Privacy.
Where MailMop stands
MailMop was built as the opposite of the receipt-panel model:
- Your inbox is analyzed in your browser. Email contents never touch our servers.
- We make money from Pro subscriptions, not ads or data. Analyzing your inbox is free.
- We passed Google's CASA security assessment.
- MailMop is open source on GitHub, so you can check our work.
Try MailMop free and clean up your inbox without becoming someone's market research.