A privacy directory’s trust score is worth using only when you can see what it measures, what evidence supports it, which product and version were assessed, and when that assessment took place. Treat the number as a summary of a defined review—not a guarantee that a service is safe or unsafe.
Start with the scoring method
A reliable directory should explain how it turns evidence into a score. Look for a dated, versioned rubric that defines its criteria, scoring range, weights or decision rules, and treatment of missing, conflicting, or ambiguous information. It should also distinguish policy review, automated scanning, staff analysis, company self-reporting, user reports, and independent audits rather than presenting them as interchangeable evidence.
As an Amazon Associate I earn from qualifying purchases.
Common Sense Privacy’s documentation illustrates why these details matter: it distinguishes evaluation levels, overall scores, and concern categories, and explains that a score alone does not establish that a product is problem-free or unsafe. Its page describes Full evaluations as a “155-point inspection”; the visible page text does not state a publication year for that figure. Read Common Sense Privacy’s rating documentation.
Free tools Windows power users keep installed
One-click scans. No signup required.
The DIACC Privacy Scorecard offers a different model. It is explicitly a self-assessment and learning tool, not a compliance checklist or legal advice. It asks assessors to document evidence for each rating and covers data minimization, anti-tracking, and security, including whether an independent security certification or audit exists. Its purpose and evidence model make it unlike a consumer-facing directory ranking, so its scores should not be compared as though they were the same kind of assessment. See the DIACC Privacy Scorecard.
#1 Best Overall
Trace each conclusion to evidence
Check whether a directory shows the evidence behind individual findings, not merely a score and a brief label. Useful evidence can include dated policy quotations, observed technical signals, audit documents, certification details, product disclosures, and relevant regulator or court records. A company’s privacy notice is evidence of what it says it does; by itself, it does not verify that every practice operates as described. Likewise, missing disclosure is not proof of misconduct.
The Internet Society’s 2019 Online Trust Audit methodology combined direct analyst review of privacy statements with technical and domain-security checks. Its policy review considered sharing, retention, notices, and access to earlier policy versions. The methodology also cautions that a website audit is a “slice of time” and may miss technologies that researchers or tools did not observe. That is a useful lesson about limits, not current evidence about any particular website. Read the Internet Society’s 2019 audit methodology.
Specific criteria can make a review easier to audit. For example, TRUSTe’s Data Privacy Framework verification criteria address whether notices describe collection sources and purposes, use and disclosures, third-party sharing, contact details, and access or correction procedures. The criteria are version 1.0, last updated July 10, 2023, and apply to that program; they are not a universal checklist or evidence that another directory uses the same checks. View TRUSTe’s Data Privacy Framework verification criteria.
Recommended Free Tools
Confirm exactly what was assessed and when
A score needs a clearly identified subject and evidence date to be useful. Check whether the assessment covers the service, app, website, operating system, features, and geographic region you care about. Look for the date evidence was collected or reviewed, not just a page’s last-updated date, and check whether the directory explains what changed when a score was revised.
Privacy notices, technical configurations, and product features can change after a review. The Internet Society methodology’s point-in-time warning applies here: even a careful assessment describes the evidence available during its review, not every future version or every data practice that might be difficult to observe.
Read the score as a scoped summary, not a verdict
Find out which privacy dimensions contribute to the score and which appear separately as concerns or exclusions. A composite number can hide differences that matter to you: a directory may evaluate notice clarity and security controls, for example, without establishing every aspect of a service’s real-world data handling.
Common Sense Privacy cautions that products with high overall scores are not necessarily problem-free and products with low scores are not necessarily unsafe. Use a score to decide what to investigate next. Do not treat HTTPS, a valid certificate, or a certification logo as proof of privacy-protective data practices. For a certification, verify the issuer, current status, covered entity, and scope of the assessment.
Compare directories on shared criteria
When you consult more than one directory, compare the methods and coverage before comparing the numbers. A score of 90 from one provider may use different questions and weights from a 90 elsewhere; the raw values are not necessarily calibrated to one another.
Best Value
- No more exposed information in unprotected notary journals. This product shields clients' confidential information from prying eyes. It allows the Notary Public to keep the journal open during the transaction, as NO prior client information is viewable.
- Shields clients' AND Notary Publics' confidential information
- GLBA and HIPAA require non-disclosure policies and procedures. Notary Privacy Guard is a compliance tool for the professional Notary Public.
- Decreases Notary Public's liability from exposing client information
- Journal column headers are printed on the Notary Privacy Guard, no having to peek underneath to complete the journal entry. Becomes part of the journal and also acts as a place marker.
| Comparison axis | What to check |
|---|---|
| Method transparency | Public criteria, method version and history, weights or decision rules, and missing-data treatment. |
| Evidence quality | Whether findings rely on direct observations or authoritative records, policy text, self-report, or uncorroborated reports—and whether those sources are distinguished. |
| Coverage | Products, jurisdictions, privacy topics, and technical controls included in each assessment. |
| Recency | Evidence collection or review date and stated update cadence. |
| Uncertainty | How unknowns, ambiguous evidence, and methodological blind spots are shown. |
| Accountability | Whether the directory offers corrections or appeals, explains score changes, and uses independent review. |
| Comparability | Whether the directories use the same scale and substantially similar inputs. |
Also check how deeply a product was assessed, not just the displayed rating. Common Sense Privacy distinguishes Quick, Basic, and Full evaluations; the label or number alone does not tell you that two products received equally thorough reviews.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Check whether mistakes can be corrected
A directory is more accountable when it explains how a company or reader can flag an error, how disputes are reviewed, and how updates are recorded. Look for dated explanations of material score changes and a way to distinguish a correction from a routine refresh. If the directory does not explain its challenge or correction process, that is a limitation to weigh alongside the score.
Quick Recap
A practical reliability check
- Find the method: confirm that criteria, scoring rules, method version, and missing-evidence treatment are public.
- Open the supporting evidence: check whether individual findings link to dated sources and whether disclosures are distinguished from independent observations.
- Match the scope: verify the product or service, version, features, jurisdiction, and privacy dimensions covered.
- Check freshness and history: identify when evidence was reviewed and whether later changes are explained.
- Read uncertainty: note what the score cannot establish, what evidence was unavailable, and which concerns it leaves unresolved.
- Check accountability: look for correction or appeal options and a record of score changes.
- Use the result narrowly: compare only assessments with sufficiently similar methods, and investigate the underlying findings that matter to your decision.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
