Privacy Policy
Effective October 29, 2026
The short version: the Recallpage app has no account, no ads, no analytics, no crash reporting and no tracking. The vehicles you save stay on your device. Lookups go straight from your device to NHTSA's public data services. We don't collect your data, so we have nothing to sell or share.
This policy covers the Recallpage app for iPhone and iPad ("Recallpage", "the app") and this website.
What stays on your device
Recallpage saves a few things so the app works the way you expect. They are stored only on your device, in the app's own storage:
- My Garage: each vehicle you save: its nickname, the VIN if you looked it up by VIN, year, make, model and trim, the NHTSA recall numbers already seen for it, and when it was last checked.
- Settings: whether Recall Alerts are on, and whether mock (sample) data is on.
- Temporary copies of NHTSA answers, so going back to a page is fast. Most are kept in memory only and are gone when the app closes; the device's standard web cache may also keep some, and the device can clear it at any time.
None of this is sent to us, and it is not synced to iCloud. There is no Recallpage server. To remove a vehicle, delete it in My Garage. Deleting the app deletes everything it stored.
Vehicle lookups (NHTSA)
Recalls, specs, crash-test ratings and owner complaints come from the free public services of NHTSA, the U.S.
vehicle safety agency, at vpic.nhtsa.dot.gov and api.nhtsa.gov. When you look something
up, your device asks NHTSA directly over an encrypted (HTTPS) connection. Each request contains only what is
needed to answer it:
- the VIN you typed, to decode it; or
- a make and model year, to list models; or
- a year, make and model, to get its recalls, complaints and ratings.
Requests carry no name, email, account, location or device ID. Like any website, NHTSA's servers see your device's IP address; NHTSA's handling of it is covered by NHTSA's own privacy policy (linked at the bottom of nhtsa.gov). Recallpage is independent and not affiliated with NHTSA, and we never receive these requests or their answers.
Recall alerts
If you turn on Recall Alerts in My Garage, Recallpage asks for permission to send notifications. From then on iOS lets the app check now and then in the background: it asks NHTSA for the recalls of each saved vehicle by year, make and model (the same kind of request as above), compares them with the recalls already seen, and shows a notification on your device if there's a new one. The check and the notification happen on your device; there is no push server. Turn alerts off in My Garage to stop the checks.
Sharing a vehicle report
With Recallpage Pro, the vehicle report (a PDF, or plain text) is made on your device from the vehicle's public NHTSA data: specs, recalls, ratings and complaints. The only thing in it that you typed is the VIN, and you can leave the VIN out. It opens the standard share sheet and goes only where you choose to send it. Compare also runs on your device.
Purchases
Recallpage Pro is a one-time unlock, not a subscription: $9.99 launch price for the first 30 days, then $11.99 one-time. It is handled entirely by Apple through the App Store. We never see your card, your Apple Account details or your name. The app only learns from Apple whether Pro is unlocked. One unlock covers your whole family with Family Sharing.
What the app doesn't do
- No accounts or sign-in.
- No ads, analytics, crash reporting or tracking, and no third-party code at all: the app is built only from Apple's own frameworks.
- No camera, location, contacts or photos access.
- We don't sell, rent or share data, because we don't have any.
The full list of places the app connects to: NHTSA (above) and Apple's App Store. The "View on NHTSA.gov" link on a recall opens Safari. "Check this VIN on NHTSA" copies the VIN to your clipboard and opens NHTSA's recall search page (nhtsa.gov/recalls) in an in-app Safari view; Recallpage doesn't send the VIN there, you paste it yourself.
This website
The website (not the app) uses Cloudflare Web Analytics, which counts page visits without cookies or tracking you across sites.
The site is hosted on Cloudflare, which processes standard request data (such as IP address) to deliver and protect the pages. The site sets no cookies and has no forms or accounts.
Children
Recallpage is for a general audience. It doesn't collect personal information from anyone, including children.
Changes
If this policy changes, the new version will be posted on this page with a new effective date. If Recallpage ever starts collecting any data, this page will say exactly what and why before that version of the app is released.
Contact
Questions about privacy: support@recallpageapp.com.