Warning: *Privacy Not Included with this product
Scruff
Founded in 2010, Scruff is an independent, LGBTQ+ owned app targeting guys who are looking for friends, dates, hookups, local events, and more. It's free to sign up for Scruff and use most of its features -- like sending a "woof," matching, and chatting with other users from around the world. Aside from the more standard dating app stuff, users can get travel advice from locals with Scruff Venture and find queer parties and festivals with Scruff Events. With Scruff Pro, you can use advanced sorting and search functions, browse anonymously, send and receive videos, and more. Unlike some other LGTBQ+ apps aimed at men-seeking-men, Scruff says they will never share your data with third-party ad networks or data aggregators. So is Scruff really among the safest and most secure dating apps out there, like they say? Well, they are certainly better than Grindr, but that's not saying much.
What could happen if something goes wrong?
Scruff is... not up to snuff when it comes to privacy. Questionable security, a track record that needs improving, and the fact that not all users are guaranteed the right to delete their data adds up to us giving this guy-focused app our *Privacy Not Included warning label.
On the security front, we can't confirm whether Scruff meets our Minimum Security Standards. It's not clear whether the app uses encryption at rest and in transit to protect all those spicy messages users send. That's worrisome because it makes all your personal information way more vulnerable to a hack or breach. And oh boy, there is a lot of personal information that can be collected by Scruff. There's the basics, like your name, email, and address. Then there's your profile information which can include your "height, weight, occupation, education, physical characteristics or description, gender identity, preferred pronouns, HIV status and other health details, ethnicity, personal interests, relationships and preferences" and more. You should also know that their privacy policy says just providing that data counts as "explicitly consenting to [their] processing of [it]". OK. And here's a couple more things we think Scruff's parent company really wants you to know -- since they're written all-caps. One is that "INFORMATION ABOUT YOUR DISTANCE FROM OTHER USERS IS PUBLIC" and the other is a warning to "NOT INCLUDE INFORMATION IN YOUR PROFILE AND OTHERWISE PROVIDE INFORMATION WHEN USING THE SERVICE THAT YOU WANT TO KEEP PRIVATE". This is a good reminder that you you should never consider your profile information or location to be private.
Like most dating apps, Scruff also collects data about what you do in the app and your messages to other users. Scruff does go a little farther than most though since they say they can collect personal information from third parties an publicly accessible sources. Boo. Oh and Scruff can create inferences "reflecting your preferences, characteristics, predispositions, behavior and attitudes" based on that data. What does Scruff do with all that data? The good news is that they don't sell or share it in ways that raises major flags for us. They can use it for their own ads on the service and other websites though, as most apps do these days. Another thing Scruff does as way too many apps do: they don't give all users the right to delete their data. That's disappointing. We here at *Privacy Not Included firmly believe all users, not just those who are lucky enough to live under strong privacy laws, should have the right to get their data deleted.
Our last bone to pick with Scruff is pretty disturbing. A lawsuit filed in 2023 claims that Scruff didn't do enough to stop child sexual abuse committed by two men who met on the app. We should also mention, on the topic of safety, that though Scruff Venture encourages you to use the app while traveling, using dating apps away from home may come with risks that could be worse for gay men.
What could go wrong with Scruff from a privacy perspective? Subpar security standards means your DMs could be leaked. Then everyone would find out you send super boring intro messages... at 2 a.m. no less. How embarrassing to reckon with a sea of unanswered "Hi"s! But more seriously, your health-related information (like your weight or HIV status) that you want to share with prospects but definitely not with your boss, could be exposed for the whole wide web to see.
Tips to protect yourself
- Visit the app's privacy preferences at the app and opt out from personalized advertising as well as all non-essential data collection.
- Request your data be deleted once you stop using the app. Simply deleting an app from your device usually does not erase your personal data nor does close your account.
- Do not give consent to constant geolocation tracking by the app. Better provide geolocation 'only when using the app'.
- Do not share sensitive data through the app.
- Do not give access to your photos and video or camera.
- Do not log in using third-party accounts.
- Do not connect to any third party via the app, or at least make sure that a third party employs decent privacy practices.
- Do not give consent for sharing of personal data for marketing and advertisement.
- Chose a strong password! You may use a password control tool like 1Password, KeePass etc.
- Do not use social media plug-ins.
- Use your device privacy controls to limit access to your personal information via app (do not give access to your camera, microphone, images, location unless necessary).
- Keep your app regularly updated.
- Limit ad tracking via your device (eg on iPhone go to Privacy -> Advertising -> Limit ad tracking) and biggest ad networks (for Google, go to Google account and turn off ad personalization).
- When starting a sign-up, do not agree to tracking of your data if possible.
Can it snoop on me?
Camera
Device: N/A
App: Yes
Microphone
Device: N/A
App: Yes
Tracks location
Device: N/A
App: Yes
What can be used to sign up?
Yes
Phone
No
Third-party account
No
What data does the company collect?
Personal
Real name, alias, email address, mailing address, telephone number, date of birth, profile name, profile photo, account name, picture, occupation, education, physical characteristics or description, gender identity, preferred pronouns, ethnicity, personal interests, relationships preferences, residence information, listing address, details for residential and other properties, rooms, accommodations, travel plans and information, payment card numbers, other payment information, a profile name, password; an identifier that is unique to the device on which you install the Service and some device identifiers may be persistent device identifiers; advertising identifiers; operating system; browser type; mobile network information; the make, model and serial number of your device; Internet Protocol (IP) address; Domain name of your Internet service provider; Platform type; pages that you visit and the date and time of your visits; Anonymized information; A history of your prior geographic locations; Your current geographic location.
Body related
HIV status, health details, height, weight,
Social
Other social networking service, other service user names; contents of any public or private messages you send
How does the company use this data?
How can you control your data?
What is the company’s known track record of protecting users’ data?
Lowcountry (US) mother sued Scruff over child's sexual abuse.
Can this product be used offline?
User-friendly privacy information?
Links to privacy information
Does this product meet our Minimum Security Standards?
Encryption
We can not determine if this product has encryption at rest and in transit.
Strong password
Security updates
Manages vulnerabilities
You can submit a vulnerability here: https://hackerone.com/scruff
Privacy policy
Dive Deeper
-
Dating app data breaches put LGBTQ people at risk worldwide, report saysThe Georgia Straight
-
Scruff gay dating app bans underwear photosBBC
-
Lowcountry mother suing Telegram, Scruff over child's sexual abuseABC News
Comments
Got a comment? Let us hear it.