UNITED SHIELD The power of US.

Privacy

Last updated: November 6, 2026

This page describes the information United Shield handles. It is the public policy for the app. It does not mean Google has verified United Shield or approved restricted Gmail access.

Account

Creating an account uses your email address and a password. Supabase Auth stores the account email. The password is sent over HTTPS and is not stored in United Shield’s application tables. The sign-in session stays on your device so you can remain signed in. The current app does not ask for a display name.

Reputation

When you search or report a phone number, email address, domain, URL, or WhatsApp number, United Shield stores that identifier and, for a report, the category you choose. A community report is tied to your signed-in account. The identifier itself is the lookup key other people can see as reputation. Reputation can be incomplete or wrong.

Personal blocks

A personal block is stored for your account and copied to the device snapshot used by iOS Call Directory, the iOS Message Filter, or Android call screening. Those operating-system features read that local copy. Community reputation can label an iOS caller. It does not automatically block the caller. Android call screening blocks numbers you personally blocked.

Activity

Activity stores the channel, action, category, confidence, whether the event matched community reputation, and whether it counts as a recorded protection action. It does not store the body of a call, text, email, or chat. The home protection total counts those recorded protection rows. It does not count every call or text the phone filtered on its own. A Recovery Vault restore is activity, and it does not count as protection.

Gmail

Connecting Gmail is optional. United Shield asks Google for the gmail.modify scope so it can read the sender of newly added Inbox mail and move qualifying mail to Gmail Trash. It does not request permission to send mail.

If you connect Gmail, United Shield stores the mailbox email address and an encrypted refresh token on the server. The app does not receive that token. An access token is used for a server request and is not stored in the connection record.

Protection uses the sender identity for an exact reputation or personal block match. It does not read the subject, body, or attachments to make that decision. Qualifying mail is moved to Gmail Trash. United Shield does not permanently delete it. Gmail decides how long Trash keeps a message.

Recovery Vault can temporarily retrieve From, Subject, and Date for a message United Shield moved to Trash, and show those to you. That subject and date are not written into United Shield’s tables. Restoring a message does not unblock the sender, and Gmail may not place it in the Inbox.

United Shield does not persistently store the raw Gmail message ID. A protection receipt stores an HMAC of that ID so the same message is not processed twice. The HMAC is not the message itself.

Google API disclosure

United Shield’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Gmail information is used to provide the Gmail protection and Recovery Vault features you turn on. It is not used for advertising.

Google has not verified United Shield, and restricted-scope approval has not been received.

WhatsApp

United Shield does not read WhatsApp chats, sign in to WhatsApp, or filter WhatsApp automatically. The only WhatsApp information is a sender number or link you enter, and a report if you submit one.

Web links

Before a reputation lookup, United Shield removes credentials, the query string, and the fragment from a link you submit. It keeps the scheme, host, non-default port, and path. United Shield does not monitor browser history and does not intercept browsing on its own.

Security

App and API traffic uses HTTPS. Gmail refresh tokens are encrypted on the server with AES-256-GCM before they are stored. You can delete your United Shield account in the app. Deletion signs you out and clears the call and message protection snapshots on the device. It is designed to delete the account and the United Shield data tied to it, including a stored Gmail connection when one exists, and to ask Google to revoke the token. If Google’s revoke request fails, the stored connection is still meant to be deleted. The updated deletion function that includes Gmail credentials is not the deployed production function yet. Gmail connection is not open until that setup is finished.

Third parties

United Shield does not use advertising or analytics trackers on this website or in the current app. It does not collect location, contacts, photos, microphone audio, or an advertising ID.